Analysis
-
max time kernel
142s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:17
Static task
static1
Behavioral task
behavioral1
Sample
c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe
Resource
win10v2004-20221111-en
General
-
Target
c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe
-
Size
84KB
-
MD5
367ce4822190bf3957ff1b264ba93e97
-
SHA1
e88007a1cde47ad7a7884d62256a47b4b3c35d15
-
SHA256
c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3
-
SHA512
7a465c1fea202bb1977864dc5b8641a00b1ce1a621158591cd9301f4a5ca19ff230c11c523fd83022f0c6e3ba4ead336f8f69013a90bfde6dbd8317c8555e323
-
SSDEEP
1536:0H6242v4N1wbw6ttrN6JWpwFZMCTa4nf2Z0foDjCPtTKps4D:03gzwbxttuZfa4nfEcTssC
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2412 1032 WerFault.exe c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe"C:\Users\Admin\AppData\Local\Temp\c80589fc1f48df7826f2a1a376d9a1f2cfd14e00589b04c9c601f45ebb5299f3.exe"1⤵PID:1032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1032 -s 2922⤵
- Program crash
PID:2412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1032 -ip 10321⤵PID:588