Analysis
-
max time kernel
189s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 14:03
Static task
static1
Behavioral task
behavioral1
Sample
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe
Resource
win10v2004-20221111-en
General
-
Target
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe
-
Size
108KB
-
MD5
50dbb7b28c333262362302738ee9fd40
-
SHA1
a09b97f37cacb65492d8fa78c99e161a06f13aa6
-
SHA256
2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348
-
SHA512
593558cc228d33eba3bf0be3572d8c449b4fb66f9aa964f06d506249d87ad5fc524413fa00eb8738e89728666141ecdaebff8da2a2f35151b3c25f5ee05b3c7f
-
SSDEEP
1536:oVrbjzNGIc5uiLmJaP5SHC1SsJl+oZvaE+hUZs+A4L0PIKECL4fP1F:oFbsFsHYQHijHZv+KZtnYjLEP1F
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3064 4112 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe"C:\Users\Admin\AppData\Local\Temp\2c62891495b4b3893558c13e92e9f6de77e140e115a7ab95a2d97fe672e84348.exe"1⤵PID:4112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4112 -s 1922⤵
- Program crash
PID:3064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4112 -ip 41121⤵PID:1088