Analysis
-
max time kernel
142s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 17:01
Static task
static1
Behavioral task
behavioral1
Sample
eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf.exe
Resource
win10v2004-20220812-en
General
-
Target
eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf.exe
-
Size
307KB
-
MD5
8080ab595477d98b701898f7ca034d2f
-
SHA1
47e3549486cf5684cdf56fe0ad4479ee7faf419e
-
SHA256
eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf
-
SHA512
68d3ef3d955b146d941c4d5c2e86638c3063396222b045e30af6f74ec31767af80150b474241b2c68593fd910c6397fabaab870c661a30dbf2cd8dc4263fdb1e
-
SSDEEP
6144:jyVOZ+OUalNEjBU18BEUuPSo6I3xhBeOxRoMy:/ZJUINoB5nIhhBeOxZy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4568 4308 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf.exe"C:\Users\Admin\AppData\Local\Temp\eff5c0fc6fa66700c0aae9c6f457952ff5a5ddc8d184dd3c5ccd86f4cc6f9dcf.exe"1⤵PID:4308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 4162⤵
- Program crash
PID:4568
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4308 -ip 43081⤵PID:1584