Analysis
-
max time kernel
4s -
max time network
9s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-10-2022 08:29
Static task
static1
Behavioral task
behavioral1
Sample
fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe
Resource
win10v2004-20220812-en
General
-
Target
fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe
-
Size
95KB
-
MD5
8292f72c80f4c051351811b0d0ddb703
-
SHA1
db5fada9e4b73734bde28cf38e7f4473b5541636
-
SHA256
fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420
-
SHA512
ffe3b81183c243260a2de861a4e2f72159192e70387f46a61d11e1908ac05f033f66d5140d79a0eba6fa70dd3a46eba39598a86f80749a27138a089359d3dd46
-
SSDEEP
1536:r+PqBtab/4QybgPTD8nf6bK6taRsTJOAX+Ftfd00oIkoDYmc:aGaD26bBtaIlX+Fld00oIkoDYmc
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5024 3724 WerFault.exe 14 4104 3724 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe"C:\Users\Admin\AppData\Local\Temp\fc57883d9d61571c7e4006bf60f6c3f8d038a5eaa8da353524d374bf6ed05420.exe"1⤵PID:3724
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 4042⤵
- Program crash
PID:5024
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3724 -s 4042⤵
- Program crash
PID:4104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3724 -ip 37241⤵PID:5064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3724 -ip 37241⤵PID:4968