Analysis
-
max time kernel
108s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19-10-2022 23:00
Static task
static1
Behavioral task
behavioral1
Sample
487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9.exe
Resource
win10v2004-20220812-en
General
-
Target
487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9.exe
-
Size
299KB
-
MD5
a132be0619f7fea081a5c962e4f974dc
-
SHA1
d1ea32838d36f93ba04ad3ce53692a594265235f
-
SHA256
487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9
-
SHA512
3a9842d2d475b63af79e42860e95ebea3248806d2d5873d723d3b5a92966d99069347fac81546f4c0fe641c11be59b415d7b126426df28e8ed8fe73430bb3b36
-
SSDEEP
6144:xw5Wn/SGtXqT75YJN8TnAFe2laWx9Kx6dbHZFKrmxIHq8ChwDJrBMaI:aIftXw60EFR59KxybHjymWqbgBMa
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2888 2548 WerFault.exe 79 4972 2548 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9.exe"C:\Users\Admin\AppData\Local\Temp\487043e29cf70efa780ecee31ad99437c2d1aa65ee5ed207c7c88182ea1a58f9.exe"1⤵PID:2548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 5242⤵
- Program crash
PID:2888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2548 -s 5442⤵
- Program crash
PID:4972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2548 -ip 25481⤵PID:3076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 2548 -ip 25481⤵PID:4792