Analysis
-
max time kernel
104s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2022, 05:19
Static task
static1
Behavioral task
behavioral1
Sample
26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084.exe
Resource
win10v2004-20220812-en
General
-
Target
26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084.exe
-
Size
72KB
-
MD5
d79923ff7c0c6f5c396740b85a5561f8
-
SHA1
b5a1205198a85e8a85a73699e952a627924bd5a7
-
SHA256
26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084
-
SHA512
a94a0fee9857dd4d94d2da85363b4740b10c1f3a2b7051f0022e674310f4d3d0b2c7792b31987656d8f813ecf910d1ad5732a9cc19af30e4068898d2478f9299
-
SSDEEP
768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iSL:qfWeK0tgc2VVLpffqHjpp19VxRw6QLSL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 384 5060 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084.exe"C:\Users\Admin\AppData\Local\Temp\26eefdf76bba92c279fde6873a5c6b564d1c34df4e182a274566b1cd96092084.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 4882⤵
- Program crash
PID:384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5060 -ip 50601⤵PID:4992