Analysis
-
max time kernel
162s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 23:40
Static task
static1
Behavioral task
behavioral1
Sample
9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd.exe
Resource
win10v2004-20220812-en
General
-
Target
9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd.exe
-
Size
308KB
-
MD5
b73006a59d9f6cdc0f524c83f21bd90c
-
SHA1
cb14811330b27e44a9c4a14592dffad06de3f811
-
SHA256
9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd
-
SHA512
40f1dd9b8c8efb3ddaad53e6f0f3e083eddd4c6a3e6f350a04b412b2fc3c541c3868f6faeaf1a6e57863a71c0feb2660e6f6b9740ccef0c8ff562c409ebde796
-
SSDEEP
6144:rUYcgU2zWFngxFQLAsdUslR7vKVFzrRexksZXNBIPrt5l:PcgU6WFDj+4LKHzNeb9OPrt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4324 2732 WerFault.exe 38
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd.exe"C:\Users\Admin\AppData\Local\Temp\9ad0f16457d662a5a2eb2aaf515d978cadc2d411ce2a395e8fd31d4bf1924cbd.exe"1⤵PID:2732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 4162⤵
- Program crash
PID:4324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2732 -ip 27321⤵PID:5084