Analysis
-
max time kernel
139s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2022 00:25
Behavioral task
behavioral1
Sample
8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd.exe
Resource
win10v2004-20220812-en
General
-
Target
8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd.exe
-
Size
124KB
-
MD5
654632f4aa7c1c931e7fbf269c92dcc1
-
SHA1
83412d5abe5bcbbcab6036c2fae8414cfe5ef1da
-
SHA256
8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd
-
SHA512
c5e227a9d3c0768f434f5c383a6e6bd19fa43ac132f4e167aa077188618f98379d1a85babb6a388c8f1552b244bf4651a436807b7f28aeb29179ff9135493230
-
SSDEEP
1536:2Go5vOx4lgsirg+NeUn49OU49aQFfob4oXIjFdl4e6pZ50xx0WPPdNQAlR+EPPaU:2GO7gD749R4hFfobKZd+q33dNQAl7PP5
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2612-132-0x0000000001000000-0x0000000001048000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 4696 2612 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd.exe"C:\Users\Admin\AppData\Local\Temp\8e86e7a2b0deeba758a750d4e7cf7dad5abcaaeb452aed83cf213967413ee0bd.exe"1⤵PID:2612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2612 -s 3242⤵
- Program crash
PID:4696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2612 -ip 26121⤵PID:1044