Analysis
-
max time kernel
155s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 06:56
Static task
static1
Behavioral task
behavioral1
Sample
dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce.exe
Resource
win10v2004-20220812-en
General
-
Target
dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce.exe
-
Size
250KB
-
MD5
4a055a8fc2e30394da0a7b4d5051e4a3
-
SHA1
5b6619a80c9893603c46ac8ddac1653a57cb3d17
-
SHA256
dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce
-
SHA512
e98bb431700b0bcac9781863ec284b9379c06c0193508ac6873bb589c1f91701bb73652d5a49fbf0c31aaa64c105bb2c219a72fc91f6cf4ec18f1148bfdd93af
-
SSDEEP
3072:9gFMFhhTs1Kp9stfnFzHd6btlKTToiEsAyNfzBQ/BVfGF+bNhQz/CytUOamYncRU:CwhFp9MnOKgizA8a5V0a6umF
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 948 5056 WerFault.exe 80 3672 5056 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce.exe"C:\Users\Admin\AppData\Local\Temp\dcde78ec9e2b78550c5f20258665a06c602d9477afae0ff9ea9a92f907d9f9ce.exe"1⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 4842⤵
- Program crash
PID:948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 4922⤵
- Program crash
PID:3672
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5056 -ip 50561⤵PID:3596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 5056 -ip 50561⤵PID:3480