Analysis
-
max time kernel
225s -
max time network
235s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 09:46
Static task
static1
Behavioral task
behavioral1
Sample
e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd.exe
Resource
win10v2004-20221111-en
General
-
Target
e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd.exe
-
Size
277KB
-
MD5
063cc2a3a291a25d7caaadce29b92204
-
SHA1
1e6fe9fda04c90db08a97e6655cfd9552b343376
-
SHA256
e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd
-
SHA512
e0f4f4b05df77f8522070e62fa0ce95b4d5690159a3a62054ad9e07dd2e70deea91e87be8445f710e856132b64ab78dcba168db2b834c52e00beff85d22a110f
-
SSDEEP
6144:i3oyNOD+0vX9BEF5Cb/b7PqwhYNDPNZupAutRv/NfCXI7X:moF9A5CDzeDupPtRv/NK4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3564 4860 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd.exe"C:\Users\Admin\AppData\Local\Temp\e97220a6a00e0a871c10ea1625788f4959247bb3a8bb658540d9b516ec9de8dd.exe"1⤵PID:4860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4860 -s 4202⤵
- Program crash
PID:3564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4860 -ip 48601⤵PID:2152