Analysis
-
max time kernel
164s -
max time network
203s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/09/2022, 18:47
Static task
static1
Behavioral task
behavioral1
Sample
26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab.exe
Resource
win10v2004-20220812-en
General
-
Target
26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab.exe
-
Size
364KB
-
MD5
e2f5663788254bf48c45693c7bbe3e11
-
SHA1
1f380d497c7dcf4743badfaadbdae92e8b32de70
-
SHA256
26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab
-
SHA512
1735a586c9972d834bea04e8e6a6e1122996ff06f255aed33c254bbafb6fd5ecf0b23d362b075edaaf50787b3009143e4047285d5c591868889f5b3233ccdd88
-
SSDEEP
6144:GbCdhZyzFFgIX0zE9NKFEWNFfK4CS0NwIW2+fFBFFrkiJi:GmdjWgIXxcXNkjNWZf1Frk
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 968 5080 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab.exe"C:\Users\Admin\AppData\Local\Temp\26af49395b3fb78493e950f6e5b65f14bfe76b878a3088478588d27a443183ab.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 4762⤵
- Program crash
PID:968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5080 -ip 50801⤵PID:2492