Analysis
-
max time kernel
139s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 23:06
Static task
static1
Behavioral task
behavioral1
Sample
90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab.exe
Resource
win10v2004-20220812-en
General
-
Target
90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab.exe
-
Size
820KB
-
MD5
00f153ada687cbe898e7bf75843dd205
-
SHA1
5f996139a57f17a603989884b87e6a72132f88af
-
SHA256
90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab
-
SHA512
e7a8ed8db86d17fefb0925f008fe2c0aeebb091e377147f5d78d101807621362b2dcc64ce403a6ec0e01888f4738745e85778b22ea5c37c20ee22592488e4a3c
-
SSDEEP
12288:wFey/RIqV24ExFh8uEh6n+DYs5+fVn9ocMBDJaLaz0oAcIPwqaV:sR/sd2uEo9fVnScEt/AcIja
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4544 4072 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab.exe"C:\Users\Admin\AppData\Local\Temp\90565cf91f624d0b787b0730406b291786e03b277434885224cce8c0c09c5bab.exe"1⤵PID:4072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4072 -s 2842⤵
- Program crash
PID:4544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4072 -ip 40721⤵PID:4464