Analysis
-
max time kernel
124s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 20:59
Static task
static1
Behavioral task
behavioral1
Sample
9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2.exe
Resource
win10v2004-20220812-en
General
-
Target
9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2.exe
-
Size
88KB
-
MD5
5552cf50b607365cba01e930baa3d3bf
-
SHA1
4ef32d6d7555783ba09b90672b641b60a455d37e
-
SHA256
9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2
-
SHA512
8c652acfc7b303734e59318e5aabf7302ba0ade40b6cdc0a26c42e2bab732d6ac8f9957871ad0aa453a81f2907523c33069feb77cdb4472823c350c68ff9c1e8
-
SSDEEP
1536:erY6+ei5diCaQT58vWddLsR5bCZk1JBm/oSZRrm0qD/O2c04Wmx1LywibnF8oO:X/8eD4bCZkZWoSZtfqi2c0S1L8bnF8oO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3400 4800 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2.exe"C:\Users\Admin\AppData\Local\Temp\9472a9bcc123e2abee07894f296133a29429ab4c240b1c243ab1533a06e09de2.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 682⤵
- Program crash
PID:3400
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4800 -ip 48001⤵PID:2240