Analysis
-
max time kernel
92s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 07:31
Static task
static1
Behavioral task
behavioral1
Sample
87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba.exe
Resource
win10v2004-20220812-en
General
-
Target
87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba.exe
-
Size
24KB
-
MD5
6a5f91e0e7e33ea45e7ae832582f73b2
-
SHA1
f4163ad97ef218da553bab5a7faa84cec32502e4
-
SHA256
87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba
-
SHA512
5d085d964a39b8e7d758149c162dc8e4cfc28f7ac32534f6559c9c58ecbf6cb30367f7719618e9bc41ee3367879db47bffe16a44917db1a6c18b4c1a0a70605d
-
SSDEEP
192:VLkY/ErDbyWgDLi+OI8trSd/LTHlK+SyqMAzot/mHxzSWUi:VDEEfi+OSdTTHlKFy9L/m
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5080 4260 WerFault.exe 78 960 4260 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba.exe"C:\Users\Admin\AppData\Local\Temp\87a3a544ae6255c8758d1483041db7859f97e71d82dea442cee3a3968ed6bfba.exe"1⤵PID:4260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 2522⤵
- Program crash
PID:5080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4260 -s 2642⤵
- Program crash
PID:960
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4260 -ip 42601⤵PID:3448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 4260 -ip 42601⤵PID:372