Analysis
-
max time kernel
147s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 01:00
Static task
static1
Behavioral task
behavioral1
Sample
8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d.exe
Resource
win10v2004-20221111-en
General
-
Target
8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d.exe
-
Size
81KB
-
MD5
8fe80863be8b3be9b49db29fec1969d1
-
SHA1
8c1c926290af8054e56b8b161e8d78adca6b3f8a
-
SHA256
8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d
-
SHA512
a2fc316c04f32ca4afec4aa1079ef5850ff2f35d8660d172187baae4b3eef6e36fcd136d1bea14354536f179095629c08d840fbbb37971bdd8a320d6844fde1c
-
SSDEEP
1536:Y1ehiNYXWXcS8uxKCF48hHKfPzIMXWCjE86ZCNphLhzca1Owrsn:Y0hiNYXWXcS8uxKCphqn0MmCtiOhAwIn
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4968 2504 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d.exe"C:\Users\Admin\AppData\Local\Temp\8e20c4ba295fad1ed0cac063dc9539efb1971f1096f3cc9845ff5a6550a07c0d.exe"1⤵PID:2504
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2504 -s 4002⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2504 -ip 25041⤵PID:4220