Analysis
-
max time kernel
91s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 14:26
Static task
static1
Behavioral task
behavioral1
Sample
c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b.exe
Resource
win10v2004-20220901-en
General
-
Target
c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b.exe
-
Size
420KB
-
MD5
bfe545e624cd8adaa45774ce6c2f4fe3
-
SHA1
336f72fe4388db08994c72ba3b138183083aef9b
-
SHA256
c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b
-
SHA512
63a9e8330ff33bd50e6c45c3349a23ce06175be293496c90b35502408b745a827c7bee5e522b100e2bafba609f410e5762177c3c72b11f4062e1ceb48802ba3e
-
SSDEEP
6144:/JZIwU+M0FbGs9+tVXDv62Wuk3af5ZclCp2Uxp4xvsQNP2CyLVk4q:/Jg+3Fau2WuUS5+4n4WQNP2L5
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1448 4960 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b.exe"C:\Users\Admin\AppData\Local\Temp\c8393bc28c7ba645657c60bbdbc028035aff148b3ee87d9f19bc7d8285ca1e9b.exe"1⤵PID:4960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4960 -s 5082⤵
- Program crash
PID:1448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4960 -ip 49601⤵PID:2576