Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 20:30
Static task
static1
Behavioral task
behavioral1
Sample
2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76.exe
Resource
win10v2004-20220812-en
General
-
Target
2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76.exe
-
Size
300KB
-
MD5
8189ba733aaaccf7a1e22fa062cfab80
-
SHA1
ecca7fdee6323a9eb4c3e317e83b961e2290ab1a
-
SHA256
2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76
-
SHA512
53bb6166297cca14293dc353fd52c0022ae7d6a6b131ebe59f11d6135339b13c6ec710fce2409dca6fd518e14946c160ef57001c4e6e84f48e7586a6e959c14a
-
SSDEEP
6144:3/ladcWn7Vlf4yOyVzjf1yS6JT6vncQaatwZE+ykRizrB9bHB9Q98S5g:8d/BNtf0SET60La6ZE+ykszrBxQ98O
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 616 1684 WerFault.exe 82 4668 1684 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76.exe"C:\Users\Admin\AppData\Local\Temp\2f8f226d5a2717f3ce23152bcd1ca20f1adf5dfb6e77b7a8994c243dab756f76.exe"1⤵PID:1684
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 5242⤵
- Program crash
PID:616
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1684 -s 5322⤵
- Program crash
PID:4668
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1684 -ip 16841⤵PID:3268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 1684 -ip 16841⤵PID:4924