Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2022 15:44
Static task
static1
Behavioral task
behavioral1
Sample
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe
Resource
win10v2004-20220812-en
General
-
Target
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe
-
Size
747KB
-
MD5
50272c56d0900e2178db4ae69393e021
-
SHA1
fc19f8d4f6b7342459e657c84f2582c36cea766e
-
SHA256
797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2
-
SHA512
744c9983ebc250ef41fadc526fad76d52432913e217c6988a0256d177fc9184185209e25a52c7157fe24eb336db40f3d1614f1faa92c5cfa9863f82716136d4c
-
SSDEEP
12288:okJKhba8Ur4BgOwxYiB3fIL7u39ElrW998nqYykCAOGvfIapvV2u03:mOr4Bd3u3alan8nRHCA9vfrs
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2616 4920 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe"C:\Users\Admin\AppData\Local\Temp\797e2d077c8e8af9f69be82d2ed595111af735399849964365ed0a7958045ab2.exe"1⤵PID:4920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 3002⤵
- Program crash
PID:2616
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4920 -ip 49201⤵PID:2232