Analysis
-
max time kernel
84s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03/10/2022, 15:59
Static task
static1
Behavioral task
behavioral1
Sample
9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc.exe
Resource
win10v2004-20220901-en
General
-
Target
9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc.exe
-
Size
12KB
-
MD5
6880df7572130359e4f1da275e1e5be5
-
SHA1
11b0af04f128042276a099676008408b0bfaf19c
-
SHA256
9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc
-
SHA512
01d6bca5b5170ec9a4b5b0b1107e4606e098c168b7c025b718b7a886b1a493d5cb7b7afe73f4f5b8bc9e360fe5a4fb0212f5dcc3946787229311acadcaf42bac
-
SSDEEP
192:aJGc1Zl2+VAfNxl1THs6xgzgVGjPlRfAL766nQAlKhFo22Xs6Z0yAHHm:aJGcMJxDTHfRmZiHc6DAHHm
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1284 5028 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc.exe"C:\Users\Admin\AppData\Local\Temp\9f8f86ecf204dc899329b6dc73c28b9dacddb9f1a97393cf19ef675b639823bc.exe"1⤵PID:5028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 5002⤵
- Program crash
PID:1284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5028 -ip 50281⤵PID:384