Analysis
-
max time kernel
337s -
max time network
353s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 17:35
Static task
static1
Behavioral task
behavioral1
Sample
cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe
Resource
win10v2004-20221111-en
General
-
Target
cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe
-
Size
331KB
-
MD5
e37b899055596e97b5ce15c6815e3d2e
-
SHA1
8a58df88edd277731687860f77897cddad4b341a
-
SHA256
cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3
-
SHA512
a5a36fcf65f5e12ac474c5474046b52399dde84b4a6d0d0a6ac7937f334180b244668efce8da580a2132f0d01e60f7a39161cbe37f2d7f4a387d717e605d0a7e
-
SSDEEP
3072:9pDS7Xba3zCFQovNCAHlbg4dQFiF6TE9gXvHTZqJypGuto:KDbaDJovNCAHlzQFi6Sqh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2648 5080 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe"C:\Users\Admin\AppData\Local\Temp\cbdcba77ddecb0a2111a8aef2e6f47d9df49b5953819eda23d7cab3420ddcfb3.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 3362⤵
- Program crash
PID:2648
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5080 -ip 50801⤵PID:4756