Analysis
-
max time kernel
161s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:49
Static task
static1
Behavioral task
behavioral1
Sample
f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06.exe
Resource
win10v2004-20220812-en
General
-
Target
f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06.exe
-
Size
22KB
-
MD5
5d6e0c695b055912c6e32bd4c41f72db
-
SHA1
0ee8e59f1f7a4fc339808a353434d4c31edf24e8
-
SHA256
f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06
-
SHA512
909a69ccb6d6af645c93f40428f37f05d4a4af287561c1f9778e4cbf15fae3117c4a1d30247f1c96780fd83abb6ef0e1e08540bce24aaf9c315671cd5754473e
-
SSDEEP
384:qGyl/y3JHyx+LInkUYV73CbgMOtNK5QIQM2ws7n8P5PbT8:vyY3JHyUIkhbCMMOt45ZBs78R
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 2748 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06.exe"C:\Users\Admin\AppData\Local\Temp\f192e2e4dcc8feef174f50705574386b40f27c4d5ef804b48aee7a007aaa0d06.exe"1⤵PID:2748
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2748 -s 2762⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2748 -ip 27481⤵PID:4560