Analysis
-
max time kernel
173s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 08:05
Static task
static1
Behavioral task
behavioral1
Sample
a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe
Resource
win7-20221111-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe
-
Size
20KB
-
MD5
3371f61a06e019f24e564aaa552b4440
-
SHA1
c49e015d979b46e49acfd0e2977e1d2b97b45d48
-
SHA256
a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924
-
SHA512
8090b79b68a89fe4b5c65b2cedfae66805b9d61bb886e39f080c0bd255e5a15927eefad99cc35b96461d844f84f95b9e777a3d009c02f8a59e235281d257fbcf
-
SSDEEP
384:+2oZ2dEVErPPKDvtCn11242cI0kts+5ON:EZ2dEVEbKxCn11HdpK5
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 8 2104 WerFault.exe 80 3508 2104 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe"C:\Users\Admin\AppData\Local\Temp\a176b3da8cbf76df10f7723a9ab59c8c3060917e6faade74ef23c4d82d27d924.exe"1⤵PID:2104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 2522⤵
- Program crash
PID:8
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 2642⤵
- Program crash
PID:3508
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2104 -ip 21041⤵PID:2068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 480 -p 2104 -ip 21041⤵PID:3568