Analysis
-
max time kernel
144s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:16
Static task
static1
Behavioral task
behavioral1
Sample
b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe
Resource
win10v2004-20220812-en
General
-
Target
b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe
-
Size
6.4MB
-
MD5
d7b80447e55c26a262c1fc231f8240b4
-
SHA1
0a837787fbeb3109fb4ee3ba3582a62e9105eeea
-
SHA256
b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770
-
SHA512
704f583429837a5688b01b50bfccb36a703be1b2d467b6dfcae9bcb4f702590c64a540710538f1798aa09a6ac8e244f637e042f8305cf6f93c4c49777c4e0702
-
SSDEEP
98304:Ylxl6Wu8deMSAN6Y/KH2Vl98th0s3F9kpUtXNwl3Nw55:YlxlxuO9ScUH2V4rziUNUNG5
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1808 1456 WerFault.exe b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe"C:\Users\Admin\AppData\Local\Temp\b8662684a5969a91baf3ae96f71de726df0a8bcfd98bbc0c6d08e6c5ee6e7770.exe"1⤵PID:1456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1456 -s 5402⤵
- Program crash
PID:1808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1456 -ip 14561⤵PID:2976