Analysis
-
max time kernel
91s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 08:08
Static task
static1
Behavioral task
behavioral1
Sample
7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a.exe
Resource
win10v2004-20220901-en
General
-
Target
7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a.exe
-
Size
28KB
-
MD5
b61441828ebf857a1bdf15f42113e2a5
-
SHA1
0f316fe5d76f9fa304a6b0b862316b935a3590f2
-
SHA256
7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a
-
SHA512
32a92abd47d515bff60f2ac1da4d4539d0180f3d88e41cbafbf2b3bd9f5e0a7d6184a8fc694c557ffb06685272b45fe23a26687fac87a38e54429a50bb45cd76
-
SSDEEP
768:lrS28jZkfQVSSKCPfPRlcl82qGKxcA7doW/b9wB:5u22SSDPxKe2RPA1yB
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4104 4844 WerFault.exe 62 2440 4844 WerFault.exe 62
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a.exe"C:\Users\Admin\AppData\Local\Temp\7e82f6e74b6d8d65e553bfae396962d35be558ab572f83c3b8b935ca5ba5b30a.exe"1⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 2682⤵
- Program crash
PID:4104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 2882⤵
- Program crash
PID:2440
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4844 -ip 48441⤵PID:4792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4844 -ip 48441⤵PID:1292