Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 12:08
Static task
static1
Behavioral task
behavioral1
Sample
d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe
Resource
win10v2004-20220812-en
General
-
Target
d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe
-
Size
123KB
-
MD5
6d8ebf8b90cdd9cb584e7fea500ec580
-
SHA1
2eee8faccfaaa39817fe7132abccbe9615862d46
-
SHA256
d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac
-
SHA512
a6d39bbfa6a225574ba01a745d23d3ef7ff9cebf9ccbbaf4f2952fa702053fa5d9bdb603955ba1cf3501eda8002d3c23c0135a85f80d0c6fa51eaf79e5d0f55c
-
SSDEEP
3072:/hx17FEe96bOIJWcsAvlNR7VBMBZWib+xQtzJXgY:V96b9jNNvWZWa5thg
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4696 4712 WerFault.exe d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe"C:\Users\Admin\AppData\Local\Temp\d7c3680d2f1aee984c6a479c41ebed38217378369289f2f6ebd6b4f651e402ac.exe"1⤵PID:4712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4712 -s 3402⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4712 -ip 47121⤵PID:1044