Analysis
-
max time kernel
122s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2022 17:56
Static task
static1
Behavioral task
behavioral1
Sample
a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9.exe
Resource
win10v2004-20220812-en
General
-
Target
a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9.exe
-
Size
164KB
-
MD5
257ee727a2b01632267e2f0be7393e90
-
SHA1
6b78740d0df0369e90917a67739091ce7ab68756
-
SHA256
a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9
-
SHA512
053ad7ab4d497336bbf7265d6accf82922e9d7df3e5338d793efd8d5e1b54cafc7c74218728228cebb3d61813c1a2a246e8abdc3ce4a97408200e0b4a1cb4e85
-
SSDEEP
3072:5eRkfwLREVV1fVmUZY4Rj+dyS25Z7ixL0pJoh0:cV6V1YUZY4Rj6yS4dixL0pJo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2052 4148 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9.exe"C:\Users\Admin\AppData\Local\Temp\a1ca0af8b287aa3a97b2051dc5bcd8507865c62b456efc3a4813657a436e01b9.exe"1⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4148 -s 3882⤵
- Program crash
PID:2052
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4148 -ip 41481⤵PID:1220