Analysis
-
max time kernel
136s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 23:17
Static task
static1
Behavioral task
behavioral1
Sample
e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b.exe
Resource
win10v2004-20220812-en
General
-
Target
e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b.exe
-
Size
278KB
-
MD5
66e2094a2f5a64f511ff5219ad435d00
-
SHA1
15816b5680bf5758d17f706e8d6890ae901783c2
-
SHA256
e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b
-
SHA512
4286cda9bfeba0915fe1f0b7c8ac5d09d9e820ffeb5fe50405d7fb15cb2811711f559a80433d0c4e29ddbca039577a36fee1f6270ee88f6dfad00991fac2f8c3
-
SSDEEP
6144:qInsN4YCRMN2CYWbBqq0TBZv3ldOSsQLH5Ap:XnsOVRa2vWV0TPv3+SsPp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 896 4908 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b.exe"C:\Users\Admin\AppData\Local\Temp\e8326fbb7a1bd456a17272db3b06cd3cbf94d170a31195cf5fb55e34344d4a5b.exe"1⤵PID:4908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4908 -s 4722⤵
- Program crash
PID:896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 4908 -ip 49081⤵PID:4580