Analysis
-
max time kernel
15s -
max time network
17s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/10/2022, 20:49
Static task
static1
Behavioral task
behavioral1
Sample
633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072.exe
Resource
win10v2004-20220812-en
General
-
Target
633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072.exe
-
Size
69KB
-
MD5
84e82a072b224c9de5071949ced295bd
-
SHA1
19fa2dee0a26a507c9e7ae03ddb7d1dd8ccbe22e
-
SHA256
633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072
-
SHA512
12cf4f65011920526db3c1244ee4b6c7b6ef7b72e3da18c0248970785fa0764b7f3373fa09dc2d7e26b023089f36e667ad9085dffd73f812b6c9d02acec841f4
-
SSDEEP
1536:iINV9qixAzo0LrrwjjqVQUrt+X0ZAyCuKblR3Goxf:ZNiiizo0HGqVBta0ZAHuK/Jf
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2772 3896 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072.exe"C:\Users\Admin\AppData\Local\Temp\633ce9907708658c1f1123a0eff053dbfd07f39c49e59c3655d7072dee04e072.exe"1⤵PID:3896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3896 -s 2242⤵
- Program crash
PID:2772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3896 -ip 38961⤵PID:3500