Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:26
Static task
static1
Behavioral task
behavioral1
Sample
a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe
Resource
win10v2004-20220812-en
General
-
Target
a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe
-
Size
364KB
-
MD5
c98f6382d1edf0ef9e22e4e299a5e7b0
-
SHA1
e28eefd061371a6edf87af22dd3e4afa55cbdf71
-
SHA256
a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f
-
SHA512
75429612253353d3f6e019a6d7bb3fb645a1d7ee4474786315923ebaf32d24ece22ab311134b357f361892e98f16d53a96ac9748d705e362eb91cdf8d6901141
-
SSDEEP
6144:szGIoDcx1y19rZ2QQuu7guf/+FcB1Dz53VfrD3zV9AuR8Rv8s2LMl8C:pufy1Ag2B1J3xrTzoueRk1Ml8
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2860 4452 WerFault.exe a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe"C:\Users\Admin\AppData\Local\Temp\a9cf804152f0ebfbe5e131b96a17e11da917d235478a5753a4ca4242088f8b8f.exe"1⤵PID:4452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4452 -s 6962⤵
- Program crash
PID:2860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4452 -ip 44521⤵PID:4968