Analysis
-
max time kernel
92s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 02:08
Static task
static1
Behavioral task
behavioral1
Sample
eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1.exe
Resource
win10v2004-20220901-en
General
-
Target
eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1.exe
-
Size
464KB
-
MD5
93ec9ef1b93d7ac33a8544b85c3510d0
-
SHA1
09da928a553ce2a860c006ab5d305fa36e895825
-
SHA256
eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1
-
SHA512
bd30ca573d49931257cef466ac203453c12f42f313ed75f6477f89b6f2015823444e9e27b51cac7dc6dfd266c0151ec6d6a40dcfa79348fe7436a4a24b7f75d3
-
SSDEEP
12288:erEZU7olJzP24OxcZUMDEYH8HxSYPrdve3Cor:erH4hP24OxbMAXSKo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 224 804 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1.exe"C:\Users\Admin\AppData\Local\Temp\eab203f62d9dd76d03674d0a00a6ec59fe86496d96e8053854f68122c48deab1.exe"1⤵PID:804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 804 -s 3722⤵
- Program crash
PID:224
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 804 -ip 8041⤵PID:308