Analysis
-
max time kernel
148s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 17:33
Static task
static1
Behavioral task
behavioral1
Sample
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
Resource
win10v2004-20220812-en
General
-
Target
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
-
Size
506KB
-
MD5
e0c536b519a383a6773dcbfa307cedb7
-
SHA1
2362c70330f68a87d01c896f5f8b8842fd44600a
-
SHA256
bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec
-
SHA512
4fbd3e900c9e575ca948ba2b4253ed14dec22dfdbb61581789289c49508f4d756ca9a98880646bc0f0c093dac17b9d124d49136152b0a14901e0e2246e5eba54
-
SSDEEP
12288:GyjuagFPhiFen4Yww3c+fP5odPxezhif96Fy2x2b:GguagFPh0en4JwMg5olxezhigF92b
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4604 4044 WerFault.exe bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe"C:\Users\Admin\AppData\Local\Temp\bb92a89b3517dd67e060aaf7bce721182a9a2d2af5bf1f15584fbe99f39261ec.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4044 -s 3762⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4044 -ip 40441⤵