Analysis
-
max time kernel
105s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 01:33
Static task
static1
Behavioral task
behavioral1
Sample
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
Resource
win10v2004-20220901-en
General
-
Target
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
-
Size
134KB
-
MD5
4dd9280fcb66e30c3a4c18f1d1b7f0ca
-
SHA1
33c5e9a4ff30fbc4b6ae7a09b59d83a6694b4960
-
SHA256
1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7
-
SHA512
32213a0b67110bfe265a0bc357cc16535a41bfcce20c885227e60cfd1c471e7a7b68d8b7ea3948ab9d6ce874b8c77494f7f4e5f7c313efcfaaefb835ae026086
-
SSDEEP
3072:MkblZSkc5IPC2K7ma7/4tKqD3boLUaUPfePgY:xbbSYPC2Xa7/4tbci3yg
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4140 1748 WerFault.exe 1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe"C:\Users\Admin\AppData\Local\Temp\1aa37a184693a2c59561f2415ade1c10f679d38d7a56e5db3de9aba4fc0983e7.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1748 -s 5802⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1748 -ip 17481⤵