Analysis
-
max time kernel
148s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06-11-2022 06:26
Static task
static1
Behavioral task
behavioral1
Sample
cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887.exe
Resource
win10v2004-20220812-en
General
-
Target
cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887.exe
-
Size
852KB
-
MD5
403f64986d4527dc876ac135ce0e1f70
-
SHA1
58e41bba12634981e71dab9f0510ca4dc223668a
-
SHA256
cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887
-
SHA512
e2621d9ccd798f755059d3115aadf9d6d5e3c51babd7ce7a1742c3e36cddadc8860d36b01c01007be5289aa04cf307a2ecc980883fe06913331a3eef25828a3c
-
SSDEEP
24576:EUSkSYKVOwvDya3We3fPIyE6+GDPd2bKH/nQKP5:elVOwvDyame3RE6+GDP4bKH/nQKP
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3512 4964 WerFault.exe 79 532 4964 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887.exe"C:\Users\Admin\AppData\Local\Temp\cc27f05e3cac179dda6fa7924100894b5d97cab67fad09ab95c0a2598235e887.exe"1⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 3282⤵
- Program crash
PID:3512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 3722⤵
- Program crash
PID:532
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4964 -ip 49641⤵PID:4640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4964 -ip 49641⤵PID:428