Analysis
-
max time kernel
92s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01-10-2022 22:57
Static task
static1
Behavioral task
behavioral1
Sample
28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe
Resource
win10v2004-20220901-en
General
-
Target
28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe
-
Size
121KB
-
MD5
6f2b5b73c071512dd20bfc6eed1b9e70
-
SHA1
186d9309c2019b1f467cf73cea64a566e6920216
-
SHA256
28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35
-
SHA512
d40f0ceb8897b24d2805b6d6ed5bdabcc8231736d4a9e2474c031bdbef6f86b96642f54513ddeee23ce5a471f51a2ef4d1de849e4c2b89989ffd2badb3b3042c
-
SSDEEP
1536:FoXLqBtMkh2+SRa/m4hZPi84GxFu8ToNxLrTEmARwfVFIagb4sQW5ffuld:uGForRaPhU84CFuzTTEZVGW5ffuld
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2264 4244 WerFault.exe 28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe"C:\Users\Admin\AppData\Local\Temp\28e506c6bef3c66e91b54b5b7794699e48c5df6ca6a6dbaef7ffc32e2c978c35.exe"1⤵PID:4244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4244 -s 4242⤵
- Program crash
PID:2264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4244 -ip 42441⤵PID:3244