Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 05:25
Static task
static1
Behavioral task
behavioral1
Sample
91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626.exe
Resource
win10v2004-20220812-en
General
-
Target
91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626.exe
-
Size
184KB
-
MD5
3b88b3527de7a2d4c0091bcc54ada860
-
SHA1
94a85848dea22535d6366f891564f7382c5385db
-
SHA256
91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626
-
SHA512
8775f530b2a1541f07cbf3b2c888dbdb7ce643229986f7e19ccf4a5ab5a84684c0a89381b3ae80c7abf0aab5ece01fc3bf1ef780ca9c2f369cf5a07b7942be85
-
SSDEEP
1536:XhOscmmBQl4eKT+3FRt8PFtKYjWll7NPc2aOxogh96snqLOHu8EUtOzPObe0DIv3:XymbwYgtKYjWFDa8th968qiIUo9yA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4972 1768 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626.exe"C:\Users\Admin\AppData\Local\Temp\91bacc90988a388c7e2a4ce1c9531afc71540b76a4b6345978477afa08a73626.exe"1⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 2362⤵
- Program crash
PID:4972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 1768 -ip 17681⤵PID:4208