Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:39
Static task
static1
Behavioral task
behavioral1
Sample
f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe
Resource
win10v2004-20220812-en
General
-
Target
f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe
-
Size
83KB
-
MD5
ca95bc155718b11b4d424300a179b49c
-
SHA1
18d7a9543cbcce0d9c8d5e3284be55af244ea816
-
SHA256
f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b
-
SHA512
9c4d1e80bf8542b65594d3a599fd19c268e205cd878cb4b3654414ffe0efe368ee90a5d53fdfb92cc7eb3d27dd69e23d33d2c020b1eb0b10d2420c9175370906
-
SSDEEP
1536:pfdFc9WIa2cx0eMZuAepEXi57ZJpeVgL1IyR65fQMXhyv0/cq/pHplzlD4R2Il0i:3yIprx0eMZuAepEXWpuUI0sQV4BTS2b
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2800 1756 WerFault.exe f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe"C:\Users\Admin\AppData\Local\Temp\f84c7d0b5ef2813a1ef0198c50822d1b0e4bf7d207e53de775be3449fc65897b.exe"1⤵PID:1756
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1756 -s 2322⤵
- Program crash
PID:2800
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1756 -ip 17561⤵PID:524