Analysis
-
max time kernel
205s -
max time network
247s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 19:00
Static task
static1
Behavioral task
behavioral1
Sample
e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682.exe
Resource
win10v2004-20220812-en
General
-
Target
e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682.exe
-
Size
70KB
-
MD5
809df19911af868b15820cfc2a394c69
-
SHA1
89c04c51637cec682563646c3b27e21d6a46aa2d
-
SHA256
e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682
-
SHA512
abd77be67a9fe2e61d43d754dabab7aa6bbdf2f9bd149f1c28aeed6ce78ac53b7320d957d2485dcdbd161f06501fe44079b60db4da195d4bab4cc4ef9669b7c0
-
SSDEEP
1536:RM31cmV+V3/XruLU9ltCE7yP3Q7yxOUQvU4IPwDBsxiGzlezKVCPNb2I:CcmVWD5ltbmP3Q7yxDaUbPQqxtpuKkNX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 528 3208 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682.exe"C:\Users\Admin\AppData\Local\Temp\e874b83a71257af74ae745e6d7f970d05669c1f1986b3ba5364a9c89344df682.exe"1⤵PID:3208
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3208 -s 4522⤵
- Program crash
PID:528
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3208 -ip 32081⤵PID:1520