Analysis
-
max time kernel
138s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
08-11-2022 02:14
Static task
static1
Behavioral task
behavioral1
Sample
aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2.exe
Resource
win10v2004-20220812-en
General
-
Target
aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2.exe
-
Size
252KB
-
MD5
5049b9f88f0817e6de0ff42ad195f085
-
SHA1
2a4075d7da5eb3cef6cd7a0ca27f7eb7e652d2cd
-
SHA256
aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2
-
SHA512
5cec52be80a5385c34865e4dd89c22c112c088b6b6a5fb9d17ebf226d23709cf6f18750945a876306468dc704a725462e6d35a9ca1eaf421f912857f7984c64c
-
SSDEEP
6144:N4GdVmoxZi7SVeEiDmC9WRkdnUGO354aFF0grPTmc0Nt/e1bPMmK:NLZ+eHC9KkhUGg42FpTUhe1w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3892 3916 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2.exe"C:\Users\Admin\AppData\Local\Temp\aa84b63461017011dfc0d585660e548d21e98840aaf48a487c0fc884a1b677f2.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 5122⤵
- Program crash
PID:3892
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3916 -ip 39161⤵PID:2584