Analysis
-
max time kernel
141s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:58
Static task
static1
Behavioral task
behavioral1
Sample
d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe
Resource
win10v2004-20220812-en
General
-
Target
d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe
-
Size
168KB
-
MD5
8eb4fd8664a72566c730c76fb5885aa7
-
SHA1
1a90a396472b0788e51149ea97520563b66e980b
-
SHA256
d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4
-
SHA512
f32c6965109c7a644b30747c07c117e399376e5f59d5d564dbbfb40322d3751b6193e0336da88737fc1315d684d15ebaa0be8739a14d1f442278ba8ac668ddf5
-
SSDEEP
3072:Odx2hqdH2fbDdx2hqdHLKRewq51loHK4K9xpZbbgHE:+2hffbT2hRPM1lFn9xY
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2700 2412 WerFault.exe d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe"C:\Users\Admin\AppData\Local\Temp\d82cdb028a121998e4b48ab302b14ddc37d50427cc4012caf57c961705810bf4.exe"1⤵PID:2412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2412 -s 3682⤵
- Program crash
PID:2700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2412 -ip 24121⤵PID:2116