Analysis
-
max time kernel
150s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 20:53
Static task
static1
Behavioral task
behavioral1
Sample
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe
Resource
win10v2004-20220812-en
General
-
Target
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe
-
Size
44KB
-
MD5
31dabfa8c23572ddc6eab605a31bd6ab
-
SHA1
a668e0a7cc5c0210c01eccb3d1e84da39a670680
-
SHA256
9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8
-
SHA512
3a9c728f56fc4880e912c7c4d5605baf12d4822f6d06997a382fff58626119b9297cc25af5a1807a0b814c176a33ca7e20e5bbc65a4d39add376d9460b3abdf3
-
SSDEEP
768:3/brzGi4zjT1mAUK12YF8rm12Cri5IoZSAzcwf3MveTdX9y2YFcRsUl/:3/r4zn1BUa2YFam12Cu5IoZSAzcwf3M4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4684 1960 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe"C:\Users\Admin\AppData\Local\Temp\9397a7bffd2c8041d2bea152ad531364eb4124e8b40280d3fc36efa1bf97ebd8.exe"1⤵PID:1960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1960 -s 6002⤵
- Program crash
PID:4684
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1960 -ip 19601⤵PID:4164