Analysis
-
max time kernel
181s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 08:03
Static task
static1
Behavioral task
behavioral1
Sample
b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874.exe
-
Size
20KB
-
MD5
aaf4a1c743959eba6506642734fc1c29
-
SHA1
b2e1b645a7cc572da753d7983af586b0b9bf6889
-
SHA256
b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874
-
SHA512
403646b1b73a3ae847141e3edfe78bb3e43ffee2ebcb823858962daadc5d5a06310da6ca2383d9afd3eb52915db0a7608ea9e5f86b9606c79945c03fbc470fb8
-
SSDEEP
6:iz3SsE7Mvq22eApxArON2BORIBvuJKQmQ:w6MC2W/SORIBvuJ5
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 424 2032 WerFault.exe 81 1884 2032 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874.exe"C:\Users\Admin\AppData\Local\Temp\b27dd49c14cd4f18284ca9eb0ab29c8da46272685e92178e2931f40ee2726874.exe"1⤵PID:2032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 2522⤵
- Program crash
PID:424
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 2642⤵
- Program crash
PID:1884
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2032 -ip 20321⤵PID:1132
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2032 -ip 20321⤵PID:3688