Analysis
-
max time kernel
170s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 08:26
Static task
static1
Behavioral task
behavioral1
Sample
0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917.exe
Resource
win10v2004-20220812-en
General
-
Target
0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917.exe
-
Size
42KB
-
MD5
78100570f87b69bb0f3ca6b6908a5a60
-
SHA1
7994ba239a11c0fdec274af33ace0d1dcd99f511
-
SHA256
0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917
-
SHA512
ad030f1fde2a759e77fdb7e46aab420c0a785d317f0219fdbf03f4ea8f3ce1a030d3783979222aaa570f7cbdc4f2e806b6807b95e15418e4807273c8ec9381cf
-
SSDEEP
384:06vLk4k1eiVTKYXnq40n8v10YEfucMqOjZc0GKfpYZ4hWvA9k74nsdk:tjkXwiVWYa4e8pEWcWksThfk7T2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 2888 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917.exe"C:\Users\Admin\AppData\Local\Temp\0991ead90e861558779d16d91ca93b579bcf5f5ffadc813951930a0336ddd917.exe"1⤵PID:2888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2888 -s 1882⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2888 -ip 28881⤵PID:5008