Analysis
-
max time kernel
91s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 20:31
Static task
static1
Behavioral task
behavioral1
Sample
2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe
Resource
win10v2004-20220901-en
General
-
Target
2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe
-
Size
330KB
-
MD5
57747bf1775275e0425ae0f364c91710
-
SHA1
d6f1fea65f8cdd5584bcdf3de7e1535612f69817
-
SHA256
2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3
-
SHA512
3ae9aa3d3c80ad325bf4dcbd6d6f95dc3b0a6058a00cac15a4800cea2408d5d9f702f4a3f43e730d651b2a4abd9e008eb104b836d7fc511f70e242cd0f7a0d67
-
SSDEEP
6144:pa6yGxGrMU+OzcapV2WvnZ4leSHhTO43NzMygTt1HW/jeLR7n+:pa9GxGwUcmUWvIHhq+MB5WKtn+
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1540 1628 WerFault.exe 2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe"C:\Users\Admin\AppData\Local\Temp\2d7e27ba0ccb83128f46bcbfba5cc7673ffd8b8907b209510949d07acf1b67c3.exe"1⤵PID:1628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1628 -s 4842⤵
- Program crash
PID:1540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1628 -ip 16281⤵PID:1100