Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:58
Static task
static1
Behavioral task
behavioral1
Sample
0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe
Resource
win10v2004-20220812-en
General
-
Target
0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe
-
Size
110KB
-
MD5
765e823801c77b511a4d0031586a3263
-
SHA1
a22894c5bfdc45c25ca567aeb1548c16b62bde2b
-
SHA256
0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9
-
SHA512
10e62285e79321f4b7757e06c4167c6fdb2f4b2f93fed38863f567dddd922741aff18bcb8befc8d56987c4da9b90197d433f086496802e256c436a266ac12b58
-
SSDEEP
1536:Tj5HFRJpyS7H+IYNKznIzQP8GABAF55utcm1R33w8ukSoSY+A37feaCMJDmYsLIv:vpyQIuHoS5Yt3XBSDADeak7dJHB/Az
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2880 1048 WerFault.exe 0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe"C:\Users\Admin\AppData\Local\Temp\0086069f4d17825c9b05d2c189a115100b1bd9745432c7943288dc34b08ecbe9.exe"1⤵PID:1048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1048 -s 4522⤵
- Program crash
PID:2880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1048 -ip 10481⤵PID:1544