Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 20:04
Static task
static1
Behavioral task
behavioral1
Sample
dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3.exe
Resource
win10v2004-20220812-en
General
-
Target
dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3.exe
-
Size
652KB
-
MD5
07deef09edf4b8352bf4d8ebb2bd3700
-
SHA1
fe401a4e1d1f5528a76600003be73e5be3daf2d2
-
SHA256
dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3
-
SHA512
4b9ac35d6a5d6b88f43f7e5e77cd4da802640419bed8b23a82228f0f4612bb76c9e95a39cf09d0d126399724d2be2632499b5f2745a71a7b51f92b0851ee7c26
-
SSDEEP
1536:nf+AwjfpAjAj3LIU0YrEcOAD8GXN+I7fJ+aCl1feX:nm5jfh3LLnZ5zoI7h+aS1GX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 3796 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3.exe"C:\Users\Admin\AppData\Local\Temp\dabfabf22674e276fb356c652e8b38aa2ce1988990caba9f9ae05d43cf5a3cb3.exe"1⤵PID:3796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3796 -s 5002⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3796 -ip 37961⤵PID:5104