Analysis
-
max time kernel
161s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 02:01
Static task
static1
Behavioral task
behavioral1
Sample
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe
Resource
win10v2004-20220812-en
General
-
Target
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe
-
Size
273KB
-
MD5
c5ec8d4d5fad12590b5cdb5a3b504916
-
SHA1
07818943402a40cf76b0846d21114ca6012ef5ef
-
SHA256
87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856
-
SHA512
5dd22d8df70b65494997d0f5d7b195b585f55e29b7163c342af4f1e50cced8d9a8bc2b7fffb0ef8f463709b6f66cc5c3e4e4849d477434e11444f312469d5aa5
-
SSDEEP
6144:d6Jm3BEjRBFwruVHlm6rssXV/diQhkJSnjF8BfiEFr6vilX:4mREjSSVHlm6Y6/dFkJSjitiEEax
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 1028 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe"C:\Users\Admin\AppData\Local\Temp\87df9274c0946b6bcad72f2fd5a3637cac3b363e834fe21e2051f1a370d5d856.exe"1⤵PID:1028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1028 -s 2602⤵
- Program crash
PID:5096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1028 -ip 10281⤵PID:4196