Analysis
-
max time kernel
75s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 22:25
Static task
static1
Behavioral task
behavioral1
Sample
0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648.exe
Resource
win10v2004-20220901-en
General
-
Target
0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648.exe
-
Size
316KB
-
MD5
1ce014d682462ce5c781684bacb56500
-
SHA1
50486169a07f01d3bfdeee9804dcb8e67c722a4d
-
SHA256
0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648
-
SHA512
2c783a9d262d2fd8b2428288e213657392574c19d5ac7973347514be425abf1ecc0d48526d280cc51a87d9ae3e9a8c0157a6156d6a5611e7850f139784854bac
-
SSDEEP
3072:1cMVnPybzV8Q3io0ce4LTI208YioBK9QRO8qLXQ:11VnPybzV8Oio0ctLTt08doLRO8qLg
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4908 2344 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648.exe"C:\Users\Admin\AppData\Local\Temp\0dc9b0664ee93e5b4672d137b86e7bd50b0f171dabd996ebcb353c34444ec648.exe"1⤵PID:2344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 4122⤵
- Program crash
PID:4908
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2344 -ip 23441⤵PID:4312