Analysis
-
max time kernel
153s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:42
Static task
static1
Behavioral task
behavioral1
Sample
ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe
Resource
win10v2004-20220812-en
General
-
Target
ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe
-
Size
809KB
-
MD5
abed620e802ea24d8d510cacbb994aa2
-
SHA1
15c93a92a5bca16b6835ab15136a509c56cfe3e1
-
SHA256
ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba
-
SHA512
0a6248995e8cd07365d85da2f830d038a4e8c086f2dd115057f2a75607c71805bd9ad5fb2fbb46f38a99f11529f7daf833491e7ea0c543eb2c19c7318df3538c
-
SSDEEP
12288:oIobRtUQsUN2EiwyHKI6fnjI/QVCwfhHKtJJ2SMFQaT7RKZkT:XobvrHryxst3stmFN7gkT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2108 4720 WerFault.exe ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe"C:\Users\Admin\AppData\Local\Temp\ebcd098c7de006f1afaa13c1dae508154afcd5a49c390f4cf6f8726ce5c810ba.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 5322⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4720 -ip 47201⤵