Analysis
-
max time kernel
167s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02/10/2022, 13:01
Static task
static1
Behavioral task
behavioral1
Sample
8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec.exe
Resource
win10v2004-20220812-en
General
-
Target
8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec.exe
-
Size
50KB
-
MD5
6cbd0d60f2c30307cde1e33601362970
-
SHA1
e78058f0c2bff40597c2b0a5892dcf93af012c2a
-
SHA256
8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec
-
SHA512
81a19c24c73e2dec883b01fbbab0b5b1683583a0628e92e6029b7abf35bf45e5e1c8ca947d07eeca6fc4cd4f6896f412a962d9a5f29b0580c1a3c98b7d62431e
-
SSDEEP
384:XEwv04cw8YCA7OTgxIuzNAnGw/IojBeYlC4hww0RYfRPHRD5RCwdk:XEq0Rw4A7OWdBkBeYlNt0R672
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3748 4252 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec.exe"C:\Users\Admin\AppData\Local\Temp\8233ed88fe559d63b3441bb5079758a11a8b625a853269f3627b6afa2ec942ec.exe"1⤵PID:4252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 1882⤵
- Program crash
PID:3748
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4252 -ip 42521⤵PID:2008