Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 20:21
Static task
static1
Behavioral task
behavioral1
Sample
b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938.exe
Resource
win10v2004-20220812-en
General
-
Target
b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938.exe
-
Size
265KB
-
MD5
74cc1ff69c8784be0f0374178657ed1d
-
SHA1
bbc44b760465f8f9bf1d0d3286e580317ac7049a
-
SHA256
b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938
-
SHA512
b8ed0257b4e2c31c17e1f2b4e80eeb365de1b578717a543e18e9cc68a74b51dece6249920315b21e5fc7f144bfa2a9baae70707e7e8f4e9a5849d4a13a4f0def
-
SSDEEP
6144:bdbC+2kY+FP7v6r7ElwXtSvCs5gf3krpXkL+FEdXXkk1L/Kij:auvs7El0tSvL5kuBe+FEsi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4556 2536 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938.exe"C:\Users\Admin\AppData\Local\Temp\b11d0abc8c7ef9bf910c0763c299a879cc4064c92209903519dbc09e6babd938.exe"1⤵PID:2536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2536 -s 4762⤵
- Program crash
PID:4556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2536 -ip 25361⤵PID:3364