Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:15
Static task
static1
Behavioral task
behavioral1
Sample
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
Resource
win10v2004-20220812-en
General
-
Target
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
-
Size
225KB
-
MD5
43c2cb824d039d2dd473f948c3155761
-
SHA1
d2a91c0b957260be9fe81412aed96fd95d616a25
-
SHA256
8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b
-
SHA512
3ff7f1a4130336e6f90fd9427d776c5cafb7f98303bd7fb4e2e73257fe2343ad82a28564b7d51d894b020561c10adee09fbab20a4f3cc97117ff52c7fcfe1036
-
SSDEEP
3072:WPxfJGXnSmEisBooTVqIdfLAvNWUhwvTTIAHFHkyVE4ABvTuYGNLXlj7wPp0tid/:NzE3FTpdk98NVE4ABGJljcPOtoHh
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1544 2144 WerFault.exe 8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe"C:\Users\Admin\AppData\Local\Temp\8b5c2ed23d82235e772635ddbedb6ced168328d9299b8c2ac885d7120540003b.exe"1⤵PID:2144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 4242⤵
- Program crash
PID:1544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2144 -ip 21441⤵PID:3112