Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/11/2022, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb.exe
Resource
win10v2004-20220901-en
General
-
Target
199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb.exe
-
Size
183KB
-
MD5
0f68c778659686bffdab1f3ff3925a40
-
SHA1
3b0be3270c7bd6dddfdd1a2ceb8930b24222c006
-
SHA256
199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb
-
SHA512
6dfbec23680f64bbe6f218269feb8f2f25e52cd4b04d9d329c756ce9ce13f2247f1670d37ea4898108f170b0363a01d2003e0dd82006cf6a451d89e24b439675
-
SSDEEP
3072:lYqfHbhq0/Deu+DZpFB+2xmh0QSoKKBlKxyAZEHzRD95Z:lP7h5Ku+ts2xmhfGKraEHtZ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2468 3368 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb.exe"C:\Users\Admin\AppData\Local\Temp\199bcc50fc940af365b893fbdf419ffb174a9b373751936b639674b5405b24bb.exe"1⤵PID:3368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3368 -s 5442⤵
- Program crash
PID:2468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3368 -ip 33681⤵PID:2760