Analysis
-
max time kernel
173s -
max time network
204s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 14:04
Static task
static1
Behavioral task
behavioral1
Sample
1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89.exe
Resource
win10v2004-20220812-en
General
-
Target
1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89.exe
-
Size
41KB
-
MD5
6384c8d3ec4842720fcb365324648cd0
-
SHA1
0bed8552b204d165f392e065931d7c86baacf785
-
SHA256
1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89
-
SHA512
ef2abd3390103c49a934794c20902324826cf29b88ad59c853f1b720ac9470cfd5d375d8a6b421c9f09fe9f148aed740eda5c1be8599b8ebf36fb26e657fabca
-
SSDEEP
384:SsJjH9KwZPXbdeTjAdRPxrWy1OF7ZcaCndByCKVGcLLbDH812oZlBTJeVvdk:Sgr9KePWcdRprfC3Cn/aVG6YH9Yl2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1604 1108 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89.exe"C:\Users\Admin\AppData\Local\Temp\1e7854b27539da2303d5a60ea14e2558be4f4abec06ec637ef9d4c203e13ea89.exe"1⤵PID:1108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1108 -s 1922⤵
- Program crash
PID:1604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1108 -ip 11081⤵PID:4724