Analysis
-
max time kernel
189s -
max time network
215s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 01:47
Static task
static1
Behavioral task
behavioral1
Sample
c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153.exe
Resource
win10v2004-20221111-en
General
-
Target
c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153.exe
-
Size
61KB
-
MD5
dc00ebd8cbf9ab0da4e8a6eeda694035
-
SHA1
de45cdebcbe339b033a86da7b788d482e5842c63
-
SHA256
c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153
-
SHA512
0f1e29aa96e6e34f7300002b0d364bc504773091555bd9106aa93c9e3dd48d30601986e3eaec9efd5476364d35e7577955dff431ac42b4a3edd45fa7527f0f56
-
SSDEEP
768:umfCR7nHJSXgPRbrP1/53bR8nrHJS8Rl3MMYEo7jzUw8H1ZDwXAan:uMCRnHAu31/Vt8nrjRl3dYEmUw8Vw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1284 2040 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153.exe"C:\Users\Admin\AppData\Local\Temp\c2ab6e83c65e4d373c1f186aa597da070d03d3d8ea19e1cb0f52f1dd896ea153.exe"1⤵PID:2040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2040 -s 2322⤵
- Program crash
PID:1284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 2040 -ip 20401⤵PID:2636