Analysis
-
max time kernel
92s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 21:22
Static task
static1
Behavioral task
behavioral1
Sample
640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe
Resource
win10v2004-20220812-en
General
-
Target
640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe
-
Size
264KB
-
MD5
abac08a871868f166dab3a346c9ec0a2
-
SHA1
28460b771913d16d888817a3034956c0d911eb15
-
SHA256
640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200
-
SHA512
ece10d6f4ecdc9bdbad6bee4f9bba9ae82ca08118f68040113103e0f775ae9b0088466e9a34fee514b910605950de67172eb3387262efa58e6b589208d1f1b55
-
SSDEEP
3072:QweEpp8teo1cwWD88U4GXiGWYj4G1GaC6c5M+CyHEscvC21phGin2bwpf/wsUWGR:WkshJ487m0C6c5f0vC2zhGi2UV/CzUw
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2628 904 WerFault.exe 640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe"C:\Users\Admin\AppData\Local\Temp\640de00c829c6e37d31682753c2ea349b20dce7ae596a92fbf800835a1887200.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 904 -s 4922⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 904 -ip 9041⤵