Analysis
-
max time kernel
139s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 17:54
Static task
static1
Behavioral task
behavioral1
Sample
9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425.exe
Resource
win10v2004-20220812-en
General
-
Target
9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425.exe
-
Size
102KB
-
MD5
110a17f552e4751b28e21d0d4f0da547
-
SHA1
26f598ce3b2c95c0e01d641b07fa88600fd7ae59
-
SHA256
9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425
-
SHA512
3b0d70c3551d26963a0ebcb7dd21a03a50e3234f749f8fe94615b64cf630565f1e1e46de5207122a439cde5c23623cfdf9726d41d3ac8d1125fcbafbf3378d9e
-
SSDEEP
1536:aS9km6KZ8ZAxB6IY1u2uuCeiMTEcGTsI/QDzNx62wlf0jfgLR1H:mmz8ZuB6JYqX7VA/w62wVnLR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4312 1392 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425.exe"C:\Users\Admin\AppData\Local\Temp\9aa61671e70ba106fd90dc9197a8b05be6e93a1ee2b5008904d4f6cece65e425.exe"1⤵PID:1392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1392 -s 4762⤵
- Program crash
PID:4312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1392 -ip 13921⤵PID:3188