Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2022 17:48
Static task
static1
Behavioral task
behavioral1
Sample
b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f.exe
Behavioral task
behavioral2
Sample
b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f.exe
Resource
win10v2004-20220901-en
General
-
Target
b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f.exe
-
Size
790KB
-
MD5
1c249767bb006c27f5472e1a33ab5c02
-
SHA1
ea4aeef0d5344f6ad3174c4afd8b8221aff63f35
-
SHA256
b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f
-
SHA512
e3257c5b6d753b5f5e92537bae4afd9c8cee0dc3e42d34870a036059104492d78ffafcbd2b8147f91952d692711433b6a67d91e620b96b97fbbfb4245b6e082d
-
SSDEEP
12288:QuC6NSlk3VqcIGJXd+qiGuudvDo7/A8n/LBcwMw5WYmkZRc1x288z8Fbu0:VC6QcVRXd+Wo77/LBcDkK2xz8c0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 508 4804 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f.exe"C:\Users\Admin\AppData\Local\Temp\b984edab07898e06690cefbfb1cb4e4547b589fc76ad8955273cfd5a96df082f.exe"1⤵PID:4804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 4882⤵
- Program crash
PID:508
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4804 -ip 48041⤵PID:648