Analysis
-
max time kernel
132s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 21:34
Static task
static1
Behavioral task
behavioral1
Sample
eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35.exe
Resource
win10v2004-20220812-en
General
-
Target
eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35.exe
-
Size
824KB
-
MD5
fb518cacf67ae7cd1086c2291c62fbf4
-
SHA1
1b07107e7ffce5789e199c60584b73e970c2ed39
-
SHA256
eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35
-
SHA512
33580a6000ccebc9eec749e2a043c9358d0000052d9f1a4e566a5e44e3a016d596974b914aa0fe4c7e61a6ade359eb5720064a442547a13f15514b054aa03a5b
-
SSDEEP
12288:kUPpGv9epH+E2rDeKxBUcL0YaIWPTaa3vMD2Olb0bHMDDDMuh:xPUUkE2+CLS2aUD2Olb0cMuh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4972 1356 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35.exe"C:\Users\Admin\AppData\Local\Temp\eb8d2388a86a75d25c680a1dacec43d622f30e33c29a3cbbe394e073fd130d35.exe"1⤵PID:1356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1356 -s 3482⤵
- Program crash
PID:4972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1356 -ip 13561⤵PID:5116