Analysis
-
max time kernel
112s -
max time network
117s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 08:22
Static task
static1
Behavioral task
behavioral1
Sample
0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6.exe
Resource
win10v2004-20220901-en
General
-
Target
0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6.exe
-
Size
52KB
-
MD5
6be6fcf6f1edf21d6aec9cad366287e0
-
SHA1
196566fcb064e1bfe435970abf72710b3c03006e
-
SHA256
0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6
-
SHA512
35733b8b4b8df26240c05b73538ecde71e1cba813e82083da6dd17b9afe889bd38f18c23dc2d684298f0aa0a31e0d10670ec5a7632d3fe1776645e0fe6f3e5a1
-
SSDEEP
384:E2XSa4q4daJWr4esELbr8jAgPvpnKbcDsqcULBYq48c3pUccvf:vOr3syr8jrpMcIvULBc2ccn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4588 4892 WerFault.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6.exe"C:\Users\Admin\AppData\Local\Temp\0f8d2b337f974b27b450ad8753b840f80ac6458edf86c7e1386d5bd54ad476c6.exe"1⤵PID:4892
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4892 -s 2842⤵
- Program crash
PID:4588
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4892 -ip 48921⤵PID:3060