Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
30/10/2022, 16:31
Static task
static1
Behavioral task
behavioral1
Sample
baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626.exe
Resource
win10v2004-20220901-en
General
-
Target
baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626.exe
-
Size
741KB
-
MD5
82bb4a24a88356225202ce57c4eed970
-
SHA1
e3e5cb4746e9bc42d62b8f3f6bf77d465ea3a4a5
-
SHA256
baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626
-
SHA512
69abd17556976fa8d741a9b689ac81bb5036ff7b77237bb778be055cfe4e5e4865f468d83218f187c643b441770f70262b40a4cdbb9e1ed3dd6773245d48e024
-
SSDEEP
12288:MvuLNlwREnEYst/69LdLQ5NEWymobsTs7dwZnUjpai5cO:0YVndst/+SBobsT+tFc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4316 2444 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626.exe"C:\Users\Admin\AppData\Local\Temp\baa4e1d07420ff639c676653833d7016bec917dde7c9a21da91d842ce2489626.exe"1⤵PID:2444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2444 -s 2922⤵
- Program crash
PID:4316
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2444 -ip 24441⤵PID:4156