Analysis
-
max time kernel
78s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
20/11/2022, 07:12
Static task
static1
Behavioral task
behavioral1
Sample
eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9.exe
Resource
win7-20221111-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9.exe
-
Size
132KB
-
MD5
5104252632a6259f9943e7caba3c0b79
-
SHA1
36400a9ad1d8531565dad38ac70dbe1117966ae3
-
SHA256
eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9
-
SHA512
6925fb0a06c4f366952934b6bda55af3ea8d677bbeecee7677c2533cb71ec19e67e1ecb1de7623f19a5356ffdf30b74fdbc6d8548e028f20ad746e6f6e7d8e70
-
SSDEEP
3072:aeNf6d2mIj0LhoEGsKbaplqsVhEdgDBkQOS:J6dI2/GsKqqsVhkas
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2384 1688 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9.exe"C:\Users\Admin\AppData\Local\Temp\eaf66e6a7d1202cd29e3c0514356baf6f2877c28ccd2a40f87387fbce29eacd9.exe"1⤵PID:1688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1688 -s 3882⤵
- Program crash
PID:2384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1688 -ip 16881⤵PID:2372