Analysis
-
max time kernel
162s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 02:59
Static task
static1
Behavioral task
behavioral1
Sample
79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2.exe
Resource
win10v2004-20221111-en
General
-
Target
79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2.exe
-
Size
58KB
-
MD5
8c015620a9bc79ec1aaf58b9edab47b2
-
SHA1
16084c80ff739fdbe112d518b3bd4871ef3f3200
-
SHA256
79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2
-
SHA512
11fb55a6d3c84e2c25e79202e6440a2d99e41e962677217de78205eef8a56252fdb3839d3de3ee81be22ace33931c422e603db6d88da9ff40052431b068b7eb5
-
SSDEEP
1536:Bxq97DG+Cc22uWlFZEqLQw0qzGFGjLJECfzT70TM0w2:Bxq9tCctBlQcQw5LiYwTM0w
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 880 4700 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2.exe"C:\Users\Admin\AppData\Local\Temp\79ffda2db23ae19fe8b44c8286b25554daf6c44f3e40a4360e085b7dfe726db2.exe"1⤵PID:4700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4700 -s 4682⤵
- Program crash
PID:880
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4700 -ip 47001⤵PID:2184