Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 16:55
Static task
static1
Behavioral task
behavioral1
Sample
a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe
Resource
win10v2004-20220812-en
General
-
Target
a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe
-
Size
277KB
-
MD5
53bc1d6c2a35c07bb9d3104ad33e0b80
-
SHA1
0d896b6f816525d8966024a8809d062173a19282
-
SHA256
a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc
-
SHA512
828b41e6501e2345f5fa7a314704b84e228fabc484502f499c288fc2eb0ee06fda796487d56da18ea4e431c23f915a2563ce6457c095f7c5337b9348922d4547
-
SSDEEP
6144:fv55IChz0JSkU/SKD0hJaByxJ9OHQy4cQzf72BUm8MOXsTYi1x:fR5IChILU/UJ/J9wQzfyGmHOcX
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 956 528 WerFault.exe a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe"C:\Users\Admin\AppData\Local\Temp\a9ee9d541bac794123aa021930d4f67a565693e4c7951c40ce357f2e5a2f7bbc.exe"1⤵PID:528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 528 -s 5722⤵
- Program crash
PID:956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 528 -ip 5281⤵PID:1444