Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
28/10/2022, 18:43
Static task
static1
Behavioral task
behavioral1
Sample
894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9.exe
Resource
win10v2004-20220901-en
General
-
Target
894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9.exe
-
Size
25KB
-
MD5
0f9822d5eb3b303838b40324e2b05be0
-
SHA1
15702bc728fc08dfc5b15c8dd42bd086067377a6
-
SHA256
894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9
-
SHA512
00075933198c10fba931634a48d654ddad372f2261b485c9baa1dfc735908a697e22ef4a9d2e97d00cb1e6a9dbcf812d0d5bb5e97e63094d7bc6a7c033fefa29
-
SSDEEP
384:brlnEjbWreEATVRPwzOeoB8uNQoN98O4lwaWjBWHLCcM4aeWlZ69O:HlnEbWrcTAoX/7ulwPWL3baeYZ4O
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 740 920 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9.exe"C:\Users\Admin\AppData\Local\Temp\894c4782a87b5a9fc88f83bc8b40d9f98c2631d64cfbfd77a101dd8ba68397d9.exe"1⤵PID:920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 920 -s 3322⤵
- Program crash
PID:740
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 920 -ip 9201⤵PID:4116