Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 07:43
Static task
static1
Behavioral task
behavioral1
Sample
0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8.exe
Resource
win10v2004-20220812-en
General
-
Target
0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8.exe
-
Size
624KB
-
MD5
99c0a7a1ce58ba922509e6dd7ac8f0fa
-
SHA1
0f7f9a783b0dec07cccaeed220897a9e5c04fdc1
-
SHA256
0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8
-
SHA512
766b0e25e9913aed89707b4e8a809abf9d5f68bb36b713b60b8271a1e1f7a550794f5c6b75e713511e3a4a428799ef8f4b17cb7c715b34f5daac655acec46985
-
SSDEEP
12288:oUWttO7IVaNNC7HfkfzMrAeQG7tWYECUrY1u1oIJ:dOtOkVaN47/krAAeP8YECUeu5J
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1216 5112 WerFault.exe 79 1360 5112 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8.exe"C:\Users\Admin\AppData\Local\Temp\0989c013d0b0b02180b0e1419168f183265dee7b450c859f3370c82f0a7e57a8.exe"1⤵PID:5112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5112 -s 5482⤵
- Program crash
PID:1216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5112 -s 5562⤵
- Program crash
PID:1360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5112 -ip 51121⤵PID:4388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 532 -p 5112 -ip 51121⤵PID:2564