Analysis
- max time kernel
152s - max time network
171s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
01/12/2022, 01:06
Static task
static1
Behavioral task
behavioral1
Sample
93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee.exe
Resource
win7-20221111-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target 93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee.exe
- Size 809KB
- Sample221201-bgb8wsba92
- SHA256 93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee
- MD5 f45beed49ba064d6707fc40f6a0e3020
- SHA1 3c9738bde48abbf9cd76f8a10030dd85b02990d5
- SHA512 5088f44be86656211719a70bbf3582223aa2b5715a1e37203c4786589780216d14d708395d7cc7c3f04ddc0526db24d196ad3f8a864fa2ad480570b1fb89c705
- SSDEEP 24576:xaX8lZIyEcfd2uxjp4WpTAOb+fcQ7FTkmDYm9Pm3GwfH2K:xaXsZIyEcfdhUW8OwdimeZfW
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 3 IoCs
pid pid_target Process procid_target 4236 2144 WerFault.exe 81 2856 2144 WerFault.exe 81 4968 2144 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee.exe"C:\Users\Admin\AppData\Local\Temp\93cb965933486b815639bd70aadfe098d270a90bb084eac1e3ba051821e337ee.exe"1⤵PID:2144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 4962⤵
- Program crash
PID:4236
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 5042⤵
- Program crash
PID:2856
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 5322⤵
- Program crash
PID:4968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2144 -ip 21441⤵PID:1632
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 384 -p 2144 -ip 21441⤵PID:3872
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 576 -p 2144 -ip 21441⤵PID:4868