Analysis
-
max time kernel
91s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 01:26
Static task
static1
Behavioral task
behavioral1
Sample
8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12.exe
Resource
win10v2004-20220901-en
General
-
Target
8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12.exe
-
Size
317KB
-
MD5
464c879fe122e1d978fc78513f9dda58
-
SHA1
a8e9eb086d1f7e2684657092af5551ee98cc9e54
-
SHA256
8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12
-
SHA512
96adcbd9642d515548fd3cda9587d08e48ffe7d62311665b84e05b5bc19956fcf43076909e3de93c05e333646af0bdce9ab81e4f45c74c0a9c826573a2adf631
-
SSDEEP
6144:PbPnJGzILYg0Bq1hRME+O/tsrr26ACb8XczkNBu:PDnJEgCOhaE+O/CrrJ/Ic+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2184 4252 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12.exe"C:\Users\Admin\AppData\Local\Temp\8fb71566ad8555c49b94c95b5cd02eabdadf2bf439ce731ec2cb328187e33b12.exe"1⤵PID:4252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 5002⤵
- Program crash
PID:2184
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4252 -ip 42521⤵PID:3608