Analysis
-
max time kernel
173s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21-10-2022 04:07
Static task
static1
Behavioral task
behavioral1
Sample
a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d.exe
Resource
win10v2004-20220812-en
General
-
Target
a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d.exe
-
Size
96KB
-
MD5
27cfa210194994047f1f2977cadb1179
-
SHA1
c10aa22820e1ee2aa10f1bfdaf4eb5329ae49448
-
SHA256
a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d
-
SHA512
6a554de5edaa2b74d459f8ef2faf816b05dd8d645a65daf10ed70a24e6f10d3e4ec9723fee800a45a30859f66340b22b49d6b236bbe14a0c61e75e26dcd901dc
-
SSDEEP
1536:5byZwGycapW+cCsr5YcNKtfuuFVsM/yCqFkAeo4NBxoL:5s3y5WjCc5Hq7GB47xoL
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5072 4916 WerFault.exe 46 4280 4916 WerFault.exe 46
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d.exe"C:\Users\Admin\AppData\Local\Temp\a0ed4a36e7221642c4050acf54ae461b8d738c630ad1fd9d9569b223bc82e76d.exe"1⤵PID:4916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 3762⤵
- Program crash
PID:5072
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 4162⤵
- Program crash
PID:4280
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4916 -ip 49161⤵PID:4824
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4916 -ip 49161⤵PID:4324