Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 11:06
Static task
static1
Behavioral task
behavioral1
Sample
770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe
Resource
win10v2004-20220812-en
General
-
Target
770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe
-
Size
54KB
-
MD5
9cb80e012124b9b49f3c27b1cf4d6dd1
-
SHA1
fa55e5f168961f2978222a7e872fe012a37e5fe9
-
SHA256
770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670
-
SHA512
07d82ccf0b5a385d18fde0382873da0facd951d4f33ee420930a6f073e52c23ee29bc80e33f805ea8d3df93e8d1ab3958b9e63b3d77904071b298b7ced1ab70f
-
SSDEEP
1536:5E027/dpXuKPlCVS1we+EQvro7flW3vr3YI6GeG:5Pg/dp+KFqe7aro7d6l
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 780 4736 WerFault.exe 770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe"C:\Users\Admin\AppData\Local\Temp\770cf0c47d145762552b395689dc294a1d5c4b7973801641e015722e478bc670.exe"1⤵PID:4736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4736 -s 2202⤵
- Program crash
PID:780
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4736 -ip 47361⤵PID:3012