Analysis
-
max time kernel
178s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 08:11
Static task
static1
Behavioral task
behavioral1
Sample
a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823.exe
Resource
win10v2004-20220812-en
General
-
Target
a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823.exe
-
Size
70KB
-
MD5
b16b2b365ac5427a4ea747af084808c9
-
SHA1
24fd13302c87e31bcda2d7118e1486d5e02fb436
-
SHA256
a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823
-
SHA512
72d5688ef723610707532727ba49bda93f238b5d9081a0be9236f9069392549cd8047221e9e86f326de80a0b8c7990471aeaa7ffd945b00d8c296dd9cf57bace
-
SSDEEP
384:N4ZTrnSLWImYmVAS2WjkuEVsTOml6lmyOf83xnpsaB4VrhIKiwH0wHfwHxS6xeqY:yxrnHo+TfjfUsTKmRwnpsaBYIK0reP7
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4772 2628 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823.exe"C:\Users\Admin\AppData\Local\Temp\a4af1bf1bbece8e378105f71feba534b1d6d2740ae8ea1f34d1fbc0dda6f2823.exe"1⤵PID:2628
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2628 -s 2442⤵
- Program crash
PID:4772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2628 -ip 26281⤵PID:4820