Analysis
-
max time kernel
90s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 15:09
Static task
static1
Behavioral task
behavioral1
Sample
14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf.exe
Resource
win10v2004-20220812-en
General
-
Target
14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf.exe
-
Size
832KB
-
MD5
6d4e93a3f176bd9c9a806bde618614e0
-
SHA1
b22799c848fa01a54aaaaa9c45cc4a2b294d3a6d
-
SHA256
14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf
-
SHA512
2636e3dd6f9330f6330ebaf3056bb9d94ef66aab068de461ea23b68977af2c78ee95a716e58a9c0763b2e839cbeb97082b6f742e8836d3ad62c0d397a2c43e76
-
SSDEEP
12288:8ARdJgJz0RkmHH0+KoAClGPhQHRixxfSaaBoL4kobksYX2LGSddnxEsBHPe9U6C:hRd6zxmU+eCAlxxfYqLpobDLGSrLeOW
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4944 1732 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf.exe"C:\Users\Admin\AppData\Local\Temp\14e7f4d446a3e7f68e88bebaee2fa4ec84869c844ae77357e802ef8f1fc14ddf.exe"1⤵PID:1732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 5242⤵
- Program crash
PID:4944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1732 -ip 17321⤵PID:4924