Analysis
-
max time kernel
108s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 20:33
Behavioral task
behavioral1
Sample
8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd.exe
Resource
win10v2004-20220901-en
General
-
Target
8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd.exe
-
Size
59KB
-
MD5
8c300ee0be35c3583fc8b62728194c2c
-
SHA1
f7e08c3d4f43d6434c8b51c85a9f92282e2056ec
-
SHA256
8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd
-
SHA512
9870a99b6cdff2b105a8431321664f5cdff898895d1290b2ed566ce0f9112a48ca216d79d56a4317d254bcf7bf7bc753bc6e913689b9a17f3578fa5141c55381
-
SSDEEP
768:oFoWTi7VKJKT0OWs5TtWERYImI7YSNyPtGJiIf6hYyIGfMrSnshKubehypRl4TM0:0bT0QRs5TQxUGwf6bsr5Sh2Rl4h5z
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4388-132-0x0000000000400000-0x0000000000421000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 3504 4388 WerFault.exe 25
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd.exe"C:\Users\Admin\AppData\Local\Temp\8ae4e09c37095674311e3905071c481b994151497be637ff0dfeeaf19901c5fd.exe"1⤵PID:4388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4388 -s 4722⤵
- Program crash
PID:3504
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4388 -ip 43881⤵PID:1704