Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 18:33
Static task
static1
Behavioral task
behavioral1
Sample
33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f.exe
Resource
win10v2004-20220901-en
General
-
Target
33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f.exe
-
Size
305KB
-
MD5
771ce1e6f8e9788b51fe95588828d000
-
SHA1
ebbffb0f64bebbeb30c52c1a7363b87e56a206d7
-
SHA256
33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f
-
SHA512
14095fff85155c4b5d29d93a384fd36891b5e713fdb1a68e6b67af81e76a7da88dd11e5fdb008990e7ae1a65499c907f76902a3c4c38bd3c53f4b86914b9480c
-
SSDEEP
6144:LQ8/321zchSWAO+nI8e4yjFbKPfE819mMBa5Cys/5DyljcP25dCZ7mRqpkl07Ejl:V/3214h9A6gyjFwfY2AjcuK1Hpkl07t0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2096 3368 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f.exe"C:\Users\Admin\AppData\Local\Temp\33967a8fb70b3e31af7706919d804151dcaa09e0fff6cb60f32a8937840aaa9f.exe"1⤵PID:3368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3368 -s 3922⤵
- Program crash
PID:2096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3368 -ip 33681⤵PID:5048