Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 06:25
Static task
static1
Behavioral task
behavioral1
Sample
0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904.exe
Resource
win10v2004-20220812-en
General
-
Target
0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904.exe
-
Size
224KB
-
MD5
6e2e9aafeb52ace5486ef2109a475df0
-
SHA1
d2df0ea1e112fcafb02651d398e87438bdaa0312
-
SHA256
0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904
-
SHA512
eb86981a9995beb9e31462b11097f859359f02e500015d6fccc6acc2b63e1d97923f851a54f5e2a7303f36855e42fa22b7f157b3ac835b60db951c2acadddf04
-
SSDEEP
1536:FGMQUW6+EMy2SgO2RdXwMY9nFnZB/MATyg1kULewm4zrJCvG:+96+ny9gOQANHB/MABkXkrJCv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1212 4960 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904.exe"C:\Users\Admin\AppData\Local\Temp\0beff73f1fd7a7154ce9330e67b0103830eb0c51b92f057bac2132b093610904.exe"1⤵PID:4960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4960 -s 2242⤵
- Program crash
PID:1212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 4960 -ip 49601⤵PID:4916