Analysis
-
max time kernel
119s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 06:01
Static task
static1
Behavioral task
behavioral1
Sample
3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe
Resource
win10v2004-20220812-en
General
-
Target
3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe
-
Size
775KB
-
MD5
6187751b06461843bbeba37e4998a820
-
SHA1
70692878fc0823fa9b6f685beafb8f41e953b919
-
SHA256
3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58
-
SHA512
bd444516a0e74f2e1afb8006eabcdc10a19254df626fcad9ef9d4aa3246a56ce27a461f62f99d0c9ae3add26224afbe7b8f4df60aa42a43707c09f81819f5a4d
-
SSDEEP
24576:JA3YZXk7Pm3pl7fgXBIo5yzoXvIdKNQcbWyqgf5E:JzSUIXBIoczofI1M/fq
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1512 4800 WerFault.exe 81 4488 4800 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe"C:\Users\Admin\AppData\Local\Temp\3bf9eea7a90af663621c5cd91169c05744e1b341aae38061199a05b8f969fe58.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 5762⤵
- Program crash
PID:1512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 5682⤵
- Program crash
PID:4488
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4800 -ip 48001⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4800 -ip 48001⤵PID:1284