Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 07:36
Static task
static1
Behavioral task
behavioral1
Sample
642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810.exe
Resource
win10v2004-20221111-en
General
-
Target
642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810.exe
-
Size
744KB
-
MD5
e10fe98b71c79756aeee31bd560f0922
-
SHA1
c00ce26d08425c781d8db945c648842f6eac460c
-
SHA256
642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810
-
SHA512
948ae26643bc75168c2321a86c1e4390a6c39ef7b2a12ff8a9b72dd36f1156575205125cf469c997a6e7a4e77be703732ffda4acbd3d3d2cf78b09daca804735
-
SSDEEP
12288:NLFAU1eaiTfHrEl1TanKJj4Iu1GEUbS3qaEahHSaILtEglZFxj+xmVm:NK4iTfrU1Tb4x8S3iadSnmglRj+Em
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2140 3152 WerFault.exe 84 2424 3152 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810.exe"C:\Users\Admin\AppData\Local\Temp\642ebbd5a3f5129c0d8f26fb28aa9afb29625b9ffd8c42466cc803a6ee47e810.exe"1⤵PID:3152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3152 -s 5322⤵
- Program crash
PID:2140
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3152 -s 5562⤵
- Program crash
PID:2424
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 3152 -ip 31521⤵PID:3556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 3152 -ip 31521⤵PID:2596