Analysis
-
max time kernel
186s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 02:19
Static task
static1
Behavioral task
behavioral1
Sample
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe
Resource
win10v2004-20221111-en
General
-
Target
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe
-
Size
1.9MB
-
MD5
38ed1482a93e877aa73059ae4d0fa8c4
-
SHA1
c38f9632058d1a71a1679191406feb105553aa1a
-
SHA256
81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c
-
SHA512
55466f9b1ed75371c4855ff286e59a1e82f01a3cb45b21470ef229cb521c1768aadfee7aad4cbabfda0ca35df5c19bd035b85bf51383579b4aa69a585d6cc6b4
-
SSDEEP
49152:4xIjr6wPSFG2a0bDgfRFqT9EPvLI2ShrNDujwA:4qjr3S023Dg7qT+PBShBDQwA
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1880 1556 WerFault.exe 81 1188 1556 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe"C:\Users\Admin\AppData\Local\Temp\81d3258c0210844668ec7482249868920b05e2f97ed93eed44f64e115933b34c.exe"1⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 6402⤵
- Program crash
PID:1880
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1556 -s 6402⤵
- Program crash
PID:1188
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 1556 -ip 15561⤵PID:2384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1556 -ip 15561⤵PID:3972