Analysis
-
max time kernel
186s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 17:26
Static task
static1
Behavioral task
behavioral1
Sample
ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b.exe
Resource
win10v2004-20221111-en
General
-
Target
ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b.exe
-
Size
304KB
-
MD5
681204c9c0b31d262f46ad5080fdd5f5
-
SHA1
17d1f015e93c00bf85c17ef3a258ebdc0502b28f
-
SHA256
ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b
-
SHA512
50291b540f75cef9a4fef5e699fe2f111084f96d63a265309f9cb08ee2ab048771e8ec5fb8516c14db9acd680d181e19c215ef884fce55d566c70939f39eed14
-
SSDEEP
6144:K2oiYVGfWJ62thHhRq+XS9AdAlHZLvvZF9lJM+mN9opqU0Dh7FC7hN7GScVn:KyxWJ623hRNC9WANFe+gA6D3avan
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 3708 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b.exe"C:\Users\Admin\AppData\Local\Temp\ce2aa7253ec42e40bf20cb62a0d1c9bd5fcc5a302069fd90ae4f44d48503b95b.exe"1⤵PID:3708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3708 -s 4242⤵
- Program crash
PID:5096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3708 -ip 37081⤵PID:1068