Analysis
-
max time kernel
200s -
max time network
201s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 07:28
Static task
static1
Behavioral task
behavioral1
Sample
aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146.exe
Resource
win10v2004-20221111-en
General
-
Target
aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146.exe
-
Size
24KB
-
MD5
84388935f0d2dbda57d5988ade10b4f7
-
SHA1
890c46f24b533e1a3d1955d6bcc01fd01b0356c3
-
SHA256
aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146
-
SHA512
3db3e1453d913e62b4ef961c3c0356504b0a9f310e95e51cc0d039968475fd568c72787b9692057e219e95a5d619a3e0c9107d9faccba2102488781210018a88
-
SSDEEP
192:fCQ74+GP7OXqWLqdm/gAB6omq58a56m24gisa6lwK8Nbzi:f/Uz4qWLymYAB6zFazBTK8N
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4228 4512 WerFault.exe 81 4888 4512 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146.exe"C:\Users\Admin\AppData\Local\Temp\aefe2bac730d753a9426db490bcf44c3480e4896d38cb955b3fd1d6b0a553146.exe"1⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 2522⤵
- Program crash
PID:4228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 2842⤵
- Program crash
PID:4888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4512 -ip 45121⤵PID:3696
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4512 -ip 45121⤵PID:1896