Analysis
-
max time kernel
98s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 08:13
Static task
static1
Behavioral task
behavioral1
Sample
b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688.exe
Resource
win10v2004-20220812-en
General
-
Target
b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688.exe
-
Size
272KB
-
MD5
4e5c6eaf59d53589015827dc5eb6e4a0
-
SHA1
1d3abe6dce3bec734bfd6f880ab80ad56c4704d4
-
SHA256
b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688
-
SHA512
2a3145c9c1036f45a3b92348564f3bfc285bc49eef8074d0e2863ff30009b3684da2f20a3cc28b5ab789ca5256282d4b394658b2e29894c180f5e1252d39cf18
-
SSDEEP
6144:TJq9MWSpK74kpKuF/hONulCjukvO4jzWs1+6ptIXgoS:1CMWSpKVKooccjuEOwWs1+9j
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4740 3384 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688.exe"C:\Users\Admin\AppData\Local\Temp\b9d957b241c12478ca919c119088507229f673d40711382c09066edc1ca7d688.exe"1⤵PID:3384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3384 -s 3122⤵
- Program crash
PID:4740
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 3384 -ip 33841⤵PID:4840