Analysis
-
max time kernel
147s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:40
Static task
static1
Behavioral task
behavioral1
Sample
8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe
Resource
win10v2004-20221111-en
General
-
Target
8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe
-
Size
74KB
-
MD5
818ef89d1797abb8dba5ad2c3b97bf2b
-
SHA1
5935d89332f72a93cea0c4478c733b0d6053d1b3
-
SHA256
8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7
-
SHA512
646261beb78af3d0e6a7c64b71362c6af85c486e160b533cb77ee55ba665878ad71b47aea5d891dd4cafe3f2acc34e7dc6960e006cbc32ed75b55a0ab169bfec
-
SSDEEP
768:tMTDT/RmnxJiaBan+Oj0y1gAUbM7ZE/PfcnvOiX6CNS:6furs+iNJdP7NS
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 208 2788 WerFault.exe 8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe"C:\Users\Admin\AppData\Local\Temp\8ef75d8e2b532205a0bfb8584457927cd2aa58d4a699f8c1a813af039f4690e7.exe"1⤵PID:2788
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2788 -s 3962⤵
- Program crash
PID:208
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2788 -ip 27881⤵PID:3536