Analysis
-
max time kernel
199s -
max time network
200s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 08:19
Static task
static1
Behavioral task
behavioral1
Sample
a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e.exe
Resource
win10v2004-20221111-en
General
-
Target
a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e.exe
-
Size
132KB
-
MD5
3669d7de9633b1e50bfdc4434459469d
-
SHA1
7262b9f27b71a5dbc6ef27a4da9f83808e5013ef
-
SHA256
a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e
-
SHA512
b7a90335170660ec0e55d35064367829d0ee1860c52d771e558f98173b4337b1c76b24ee0a36a9d31edf942bc184498a74ddc05b5a4a2fa72fca6c5542c2ed81
-
SSDEEP
3072:KwFIbN7RUOJAK4swBATSopYKKPQg34VexFqcfRdGdGPc3n:9uPU3vBupE4V0TJE3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2448 5040 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e.exe"C:\Users\Admin\AppData\Local\Temp\a5ea187c689358cc182b7dc97b932834b71130dec49debd6b66d65a67706e14e.exe"1⤵PID:5040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5040 -s 5202⤵
- Program crash
PID:2448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5040 -ip 50401⤵PID:4268