Analysis
-
max time kernel
222s -
max time network
234s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 03:47
Static task
static1
Behavioral task
behavioral1
Sample
22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c.exe
Resource
win10v2004-20221111-en
General
-
Target
22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c.exe
-
Size
712KB
-
MD5
adf5fdb327cb4390082c1aedcf3dfe4e
-
SHA1
28834734d49019ff50f76b44602459b2ab21fb03
-
SHA256
22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c
-
SHA512
d333d2c7dab580b209340e7a90fa5e055cb89a004c3698cbf2480b128346d6e4622a7990eac04d3a3e92aa907acfe0737e79b92d116df7ec442ea75607b7ab48
-
SSDEEP
12288:oxwqTZ8Zov/FiCLiyC4v9VkDJv/QQgXYhB+JqaqyxduTMrPz7AAvobyGYyf:mwqTZ8ZoXFiCfv943AUB+gaqUkUPzRvG
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 816 620 WerFault.exe 78 4596 620 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c.exe"C:\Users\Admin\AppData\Local\Temp\22ef12c431d88a251301d1a2ab306cc8fbf4d664c20e057e64161fd2bf49077c.exe"1⤵PID:620
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 620 -s 5242⤵
- Program crash
PID:816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 620 -s 5362⤵
- Program crash
PID:4596
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 620 -ip 6201⤵PID:4452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 620 -ip 6201⤵PID:4040