Analysis
-
max time kernel
200s -
max time network
210s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 10:16
Static task
static1
Behavioral task
behavioral1
Sample
2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965.exe
Resource
win10v2004-20221111-en
General
-
Target
2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965.exe
-
Size
32KB
-
MD5
7a4cadb0fea0e28b3c2d473ae4114847
-
SHA1
9f754bfd64591dca5d599a742ac64e370ae53c49
-
SHA256
2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965
-
SHA512
6cfd3d5cbbecdfa7c9ab46c664fcbe5aad280d329f476f011d229abb83f8ed9446c3a7ba2519353027777c42f64b9d7cea5cf0e30f4a925c244e10068838ef26
-
SSDEEP
768:ZJIZdNDayC8eZoxO6t7/qVKzrf/MqDEzwBpwgj:ZJIZa8eZuO6t7/rzrfEqDGG
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1016 2944 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965.exe"C:\Users\Admin\AppData\Local\Temp\2527139e9be21112ad52f035f128f83b5c39c1c712db84a9f83ecc0b21dfe965.exe"1⤵PID:2944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 4722⤵
- Program crash
PID:1016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2944 -ip 29441⤵PID:664