Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10.exe
Resource
win10v2004-20220812-en
General
-
Target
dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10.exe
-
Size
207KB
-
MD5
909c65f7288c4b73bbaab7ff6f72150a
-
SHA1
aa2e88c532648f8bdd69eccc3cb7d554a11adbc8
-
SHA256
dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10
-
SHA512
e7add17b7368d15cc9e2e7479e6fc7f8d56226045a26432a999493e60381a73cdcc7f5457ac4fa31d53374ed04f785808a7654f398962bf6875abaff4d1dcb75
-
SSDEEP
3072:abjmRZBZ17EOK93NkXhMoC10IDGd6BOqNJ/CmFH1gHxKdZFtyuKiFecTC1Mr6LHt:bZZEOK99kX6pB7FdbUuAgC1g4N5Si
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3752 1556 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10.exe"C:\Users\Admin\AppData\Local\Temp\dafa76d945e5ddfcfc3dc8c3b4e82541ec3e8a42b914aa9734c62e8e65846e10.exe"1⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 4042⤵
- Program crash
PID:3752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1556 -ip 15561⤵PID:3636