Analysis
-
max time kernel
92s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/10/2022, 02:36
Static task
static1
Behavioral task
behavioral1
Sample
077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab.exe
Resource
win10v2004-20220812-en
General
-
Target
077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab.exe
-
Size
55KB
-
MD5
44c4d00cca05368fddda263b029983d6
-
SHA1
1965e4fc20b60c3e58269e0c3a4732c0a5b4e16e
-
SHA256
077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab
-
SHA512
e93bc5b91c1132773708f0f128aa7bb576a183d76f35b562f135a181ade2faea40f637590ad5715fa8f8cd2b127f624933f99aa85179f8fe9d312763f3144635
-
SSDEEP
1536:RmvICWBOTxVgKb2nsAX1MXWLb+Qlz/icqGyeNG:8vICVZ2sAFMXC3zacqPM
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 808 4324 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab.exe"C:\Users\Admin\AppData\Local\Temp\077f6ef34c6e2001ff4b0b6984929aa392a83197276739102bd26b7e167400ab.exe"1⤵PID:4324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 5042⤵
- Program crash
PID:808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4324 -ip 43241⤵PID:5048