Analysis
-
max time kernel
108s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 08:10
Static task
static1
Behavioral task
behavioral1
Sample
2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda.exe
Resource
win10v2004-20220901-en
General
-
Target
2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda.exe
-
Size
80KB
-
MD5
6c0f584a92fff74c8a6f30bb32d24f20
-
SHA1
72616a0b22b3788206b2f37f013e253109ad0358
-
SHA256
2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda
-
SHA512
451b9781369a0000a444c539d874afdbfe91f44fcfd1bc1764b36dd51ef591cee296541ab4f20ff4c1aacceb446fd1d839611d920af27c79ca767ef46e28658d
-
SSDEEP
768:5petD9nrhdpKNI7CeurbdRCd9J3f/YJERewHIGrMbcfqH4Dkg/qW1:ParhfvW1dRCd9Nf/9frMbwqYIg/f
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4484 3784 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda.exe"C:\Users\Admin\AppData\Local\Temp\2849dab99b9d9aac71745604f543131ed119b71a487b1b0247d118c9b632cdda.exe"1⤵PID:3784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3784 -s 6122⤵
- Program crash
PID:4484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3784 -ip 37841⤵PID:1808