Analysis
-
max time kernel
96s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-10-2022 22:59
Static task
static1
Behavioral task
behavioral1
Sample
20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe
Resource
win10v2004-20220812-en
General
-
Target
20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe
-
Size
130KB
-
MD5
6e222cf7d9fb6e9a6b561ecd5a3db8a0
-
SHA1
29970241a6d08be901c379726c90344e04fd76ba
-
SHA256
20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994
-
SHA512
1f34f2ab6580acae13d1450572bd807000f7fa32e3888ac5f70f933a4cfbafe9eac2bdbe090c38f00cdfb9ccbd38148f4ead712b88f7b5a129f61605cd46a68e
-
SSDEEP
3072:UpJCHVkQh+F+kOg6IF65xw552Up7zScZkQbyxSI:eyVkkko5CnpHScZkCyZ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1044 2732 WerFault.exe 20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe"C:\Users\Admin\AppData\Local\Temp\20a71f01fc6e51404b29985a04af085b1d9611a1e9413103cf477fc7c159e994.exe"1⤵PID:2732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 5002⤵
- Program crash
PID:1044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 2732 -ip 27321⤵PID:4200