Analysis
-
max time kernel
255s -
max time network
364s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 12:21
Static task
static1
Behavioral task
behavioral1
Sample
8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058.exe
Resource
win10v2004-20221111-en
General
-
Target
8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058.exe
-
Size
776KB
-
MD5
b3632146bc4432d3502d264633e2b41d
-
SHA1
f8bdaa5cc8b0d4bb0dd7d710909dd311b6c558e4
-
SHA256
8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058
-
SHA512
a792054a060746199a484993d6f79e03fdd01d0c9461a0dddded4367a44d1d67d6e7342009698c68bd0534b9ec99300ae99ac925c6c521bb278f81549613ae88
-
SSDEEP
12288:xyEXcgDRGuBtrbeFs9f9Kp0mlO3jjSfmu2SsDSyc86XPdDyUaqL:9Xc16beFYfm0fz/XRcmA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4128 520 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058.exe"C:\Users\Admin\AppData\Local\Temp\8ba70cc45395e05649a9e2613fff2473b5bd1f5092b3e9eaca762b2082e4a058.exe"1⤵PID:520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 5522⤵
- Program crash
PID:4128
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 520 -ip 5201⤵PID:1048