Analysis
-
max time kernel
152s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 06:18
Static task
static1
Behavioral task
behavioral1
Sample
26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d.exe
Resource
win10v2004-20220812-en
General
-
Target
26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d.exe
-
Size
256KB
-
MD5
6d6548c1082d3a78342af95de17b8c67
-
SHA1
6fc330fa719ae91aaca6482dfe633eab6c33b4cd
-
SHA256
26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d
-
SHA512
60af57afc9ecc54d7244719829f8fb732a4db7e50fc7270c5b086f487613bd727ef549ce55dacc236a9c6f6cbb15e5c784b6e949b6881484783ce16700298f2b
-
SSDEEP
6144:XeujK1hPk7Eh7mqE2Wd9kb6Wn6eBEH+BxHWNmuJ:P97gER86eBEH+qN9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4936 668 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d.exe"C:\Users\Admin\AppData\Local\Temp\26073fbd852140640957dda1c1ab9dd79add27939f1b640e4f4a93eee178209d.exe"1⤵PID:668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 668 -s 4322⤵
- Program crash
PID:4936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 668 -ip 6681⤵PID:4888