Analysis
-
max time kernel
111s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 10:21
Static task
static1
Behavioral task
behavioral1
Sample
e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e.exe
Resource
win10v2004-20220901-en
General
-
Target
e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e.exe
-
Size
282KB
-
MD5
14d8bd59ca3fe485dfd2d9212a1026c0
-
SHA1
92d7409716da28428ecfd0cdc552d9a3fdb04343
-
SHA256
e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e
-
SHA512
c6ee83395bc7ab8249e975abd04465567516b0394d3ff043e89c6a3e548ee36711101ab444fba2ad671d2654639c19cbc2449c2ac76946d924ce38dc98c45de9
-
SSDEEP
6144:M4bdG5xtYKbS9NwQDHBpt3HFPZDyC59z3cbviGJaVsf5R:N+xaK2rHvt3HjDyCHsezVsR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2184 4572 WerFault.exe 33
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e.exe"C:\Users\Admin\AppData\Local\Temp\e9cd08c46c306ab88236af0c0eacbb79e32a31ef42c96404f49f7bdb1dc2532e.exe"1⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4572 -s 2962⤵
- Program crash
PID:2184
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4572 -ip 45721⤵PID:992