Analysis
-
max time kernel
61s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2022, 21:57
Static task
static1
Behavioral task
behavioral1
Sample
27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76.exe
Resource
win10v2004-20220901-en
General
-
Target
27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76.exe
-
Size
359KB
-
MD5
369473384c31c2d674b7055c29a63c63
-
SHA1
f0a81e6774a024d4fc712a4cfe2698bb687aa316
-
SHA256
27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76
-
SHA512
38836f833133b1757396f1111d9ea9e12ecd3384cd91b323fb9a005635933b0a79d3d8760ecc7c5f14f6bad3e4f51b0e0cd6615dcf1ad2155ab02492cbecf256
-
SSDEEP
6144:uizJVFcObrxqph4s8stCzhiv4tiWY80FvrlTsZOjkaPa6SogmlAq4SYn/l:lJ/cObrApys7BhH80aOj1a6SodAq4XnN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4980 2948 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76.exe"C:\Users\Admin\AppData\Local\Temp\27f1dded7078b97eb16cc9b39a27e450aad979d1587815c1626b5e869fc50a76.exe"1⤵PID:2948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2948 -s 4482⤵
- Program crash
PID:4980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2948 -ip 29481⤵PID:4108