Analysis
-
max time kernel
139s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 15:24
Static task
static1
Behavioral task
behavioral1
Sample
cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037.exe
Resource
win10v2004-20220812-en
General
-
Target
cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037.exe
-
Size
100KB
-
MD5
0fd835951215f7786308962a91ff69f1
-
SHA1
65991bf0efa9d57c13cf1edca5c63c2b16635218
-
SHA256
cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037
-
SHA512
4b2fbc0056b9fdd8d7a86da0f43da9f06211b45d8858ab4b0ac1f13047e29b06ac40fe1424e90a4cafbd48676a24dfd43c78b8b21ce052da028a9598ce649120
-
SSDEEP
1536:hwtxe77wYrxu195ny0KvB3+YKhg1CerzzrL1liRUxdjLd6w4Dn340SuU:hee3Ik0K5I0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4852 900 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037.exe"C:\Users\Admin\AppData\Local\Temp\cff35f43ff714002bb428705665689c46d09de7a38c271eda2d0f821184aa037.exe"1⤵PID:900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 900 -s 1922⤵
- Program crash
PID:4852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 900 -ip 9001⤵PID:2016