Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 21:08
Static task
static1
Behavioral task
behavioral1
Sample
e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02.exe
Resource
win10v2004-20220812-en
General
-
Target
e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02.exe
-
Size
140KB
-
MD5
08460d36a43789998723812b10bf037e
-
SHA1
7f1b9735054179f69ec97c51cb1b1dd90071cd1a
-
SHA256
e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02
-
SHA512
515923436be66bac238475625e2d88974120ae32ad3bf25640471579ffe8cbf393ea3d0018f4e9debaf5901665d6cad5983ea7a3308778c24becd86526c402ef
-
SSDEEP
3072:2lZI9xMHNK223GCZi+u93XVBR2Nr9hoOVGToadTu:2l2nMBvH/Rmo/ToUa
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4992 2080 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02.exe"C:\Users\Admin\AppData\Local\Temp\e7486217cd8acb143fc70646cb4c3e3eab74fe820a2bcadee0828e2f62accd02.exe"1⤵PID:2080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2080 -s 4842⤵
- Program crash
PID:4992
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2080 -ip 20801⤵PID:4940