Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 19:37
Static task
static1
Behavioral task
behavioral1
Sample
eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd.exe
Resource
win10v2004-20220812-en
General
-
Target
eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd.exe
-
Size
389KB
-
MD5
0e97571aad0c32f2c39324a7bddf859f
-
SHA1
aa17644bbc7dfd42dedbea14ca1c8968c63586e1
-
SHA256
eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd
-
SHA512
ace7be52937406b9ef52d0d79aea5982eee3c1f9ac15c84147ceb542531ab4f2992302a9c4a7c490aa2f546b82325bb3a092e5528a6f5362f5da88ae9e65b67c
-
SSDEEP
6144:Mu+QBMQNsPCy0TrYeqipD+MK5zySlX5o8ThQ00S9YwJKxqsWoi47XqfJH7OHuiL:Mu+QVPaeZCyK9RKBxXmHcrpc6
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2192 4612 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd.exe"C:\Users\Admin\AppData\Local\Temp\eb43487b7e241e88d099ac45b2967420fa97c0d1f7b7349f73a4b1affb08fdcd.exe"1⤵PID:4612
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4612 -s 4442⤵
- Program crash
PID:2192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4612 -ip 46121⤵PID:4468