Analysis
-
max time kernel
172s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 13:50
Static task
static1
Behavioral task
behavioral1
Sample
b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a.exe
Resource
win10v2004-20220812-en
General
-
Target
b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a.exe
-
Size
80KB
-
MD5
97ea3081f9896ebe8286c20d33e3383a
-
SHA1
96a06e8009535b5a8b1b7803c0dbdfec8592ed49
-
SHA256
b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a
-
SHA512
f0f104ad8be0dd2866c07e206fbf7674d4a76521c3f427f23e35faa46276afe3860a60d158f3a4e5d674248a0ab893960f0bdf998e62a7b3e1ac988d86c83aab
-
SSDEEP
1536:2onMcQqN0mRWUi3FhZ56q9HRtoTpLrOEaeH0Ysx1xZllsJbEF6B+H/j5JuoYq:2on/NpoF5dDoTpLiEaeFsBZ4bEF6B+
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1528 1796 WerFault.exe 77 4692 1796 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a.exe"C:\Users\Admin\AppData\Local\Temp\b012c95b1280763096eedc1bbfeac52931db469990c13e0ece75a24b9abf499a.exe"1⤵PID:1796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 2762⤵
- Program crash
PID:1528
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 2842⤵
- Program crash
PID:4692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1796 -ip 17961⤵PID:4436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1796 -ip 17961⤵PID:4772