Analysis
-
max time kernel
76s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 02:10
Static task
static1
Behavioral task
behavioral1
Sample
82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798.exe
Resource
win10v2004-20220812-en
General
-
Target
82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798.exe
-
Size
65KB
-
MD5
a0b17e2e9b23d6ed2d0f03914ca36a48
-
SHA1
f34a9a8b8cc919d3e864acd2aeab4119bdcc698a
-
SHA256
82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798
-
SHA512
bdd7f9bc65c8cc52a8bb0c7c815428c0ff8531a4942d3f50c464ab466ee09011822deee5925ba80e42b3aeea29e7a27dab60296f18ce42998e0c95b4346a115d
-
SSDEEP
768:9TdCt5Z3k9wVfV7uqGdFfw/i8aNza6UWKAqx38QEBEMp+eAHrfSt:95Ct5Z30GflOvfkcUDxvESMp+NLfSt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4960 2372 WerFault.exe 46
Processes
-
C:\Users\Admin\AppData\Local\Temp\82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798.exe"C:\Users\Admin\AppData\Local\Temp\82f099f9b079225f645dc52566c6d70a19a39569cfdb25d59f0fd36ceb69a798.exe"1⤵PID:2372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2372 -s 5362⤵
- Program crash
PID:4960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2372 -ip 23721⤵PID:4892