Analysis
-
max time kernel
146s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
19/10/2022, 20:49
Static task
static1
Behavioral task
behavioral1
Sample
d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c.exe
Resource
win10v2004-20220812-en
General
-
Target
d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c.exe
-
Size
74KB
-
MD5
a0dcf0176db6f518df5c4d2fff94a570
-
SHA1
bbf2fcc97a2df14a55f0c58ebe5c8e8073bfb72d
-
SHA256
d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c
-
SHA512
33ad4fe8037fd4e82bb17acade8185ab6cd7eb465163e067b199f7061d3bf11420b90f7abb4490bf47ad8f78c02e36a39b7dd2e44586b4abb433aaefa9d2a73a
-
SSDEEP
768:r9boKgX0QHqwPtq7ekZo7dCObAaA4vpIzkst4WZ1NQapp4isKl4qb:SkQHqwqZgCPsvSzk+bjQ64isKldb
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4940 3068 WerFault.exe 36 4816 3068 WerFault.exe 36
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c.exe"C:\Users\Admin\AppData\Local\Temp\d9d6228f59550d2e90a33153551d9f69f365505a511d6704486bcb20e937014c.exe"1⤵PID:3068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 4562⤵
- Program crash
PID:4940
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3068 -s 4762⤵
- Program crash
PID:4816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3068 -ip 30681⤵PID:2100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3068 -ip 30681⤵PID:4856