Analysis
-
max time kernel
112s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-10-2022 12:27
Static task
static1
Behavioral task
behavioral1
Sample
9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6.exe
Resource
win10v2004-20220812-en
General
-
Target
9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6.exe
-
Size
436KB
-
MD5
a2a9383f5cc3034f11c8f674bd45a430
-
SHA1
f94f0b695246307111c1eacdc6594819c8f49955
-
SHA256
9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6
-
SHA512
b5a1a340cfe13af8896fbb3680dcc71568c4908cbeb6b4250b04251f7f2a09db39d5e0358d280fa57bc697d9a0327b050cb05ef314989baaf585182029f04808
-
SSDEEP
12288:1JER0K8eDffRRFYis8w3j3Z3mTQ2p2jNP4MRjG1XIuCCZ:T+jFY2wz3Z3WQ2peRC1X7
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5076 5044 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6.exe"C:\Users\Admin\AppData\Local\Temp\9b8c493911b1fa6523f7bca882ae6ed08d8b0624bbf68cc0ee96e1c49b56bfd6.exe"1⤵PID:5044
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5044 -s 7082⤵
- Program crash
PID:5076
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5044 -ip 50441⤵PID:3880