Analysis
-
max time kernel
189s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:48
Static task
static1
Behavioral task
behavioral1
Sample
eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe
Resource
win10v2004-20221111-en
General
-
Target
eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe
-
Size
21KB
-
MD5
85766db69dbb8164eaaac4149927320d
-
SHA1
12924328777e24658c639926879e1828ff22dffe
-
SHA256
eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a
-
SHA512
00af90179586bcb4d470c13a36fd0eaa1bdc632c8eec798d9a795987fb7f70e53766c0e87a27f020021ed8ed5f03f70c9eac75e235cacb7e88651c463c893437
-
SSDEEP
192:UoL98e4RhLCL0Xxal+NHNNEDO6PKOAkJOVn8LkTOdKG2GdAbDqxpSgpPO0I:vq/Lg0XM+mC6VNwUKF2xbpP
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4444 440 WerFault.exe eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe"C:\Users\Admin\AppData\Local\Temp\eab393420cf80da118d840ec112ed66facd592d03980876470aec6df64be2b9a.exe"1⤵PID:440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 440 -s 2722⤵
- Program crash
PID:4444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 440 -ip 4401⤵PID:4464