Analysis
-
max time kernel
90s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 21:28
Static task
static1
Behavioral task
behavioral1
Sample
8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232.exe
Resource
win10v2004-20220901-en
General
-
Target
8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232.exe
-
Size
20KB
-
MD5
6bbb68b6c5e6ad58a3943710afaa82a9
-
SHA1
7a8a5e722f57bb1b95f103e9c45d99968d596767
-
SHA256
8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232
-
SHA512
905370c5d00cbf825b932819528540f23d74828088b0ad71aac376ef2c336b62e01e34fa4c9059874bcfb36057a730d80f36a001c854e7da47a38e9e891e913d
-
SSDEEP
96:HlsgWqgCe/DNZV3CBn/q10Yg5sCGaLUb+84hRpzP7kNqnAfDs4C/udWIUVqCs:FMnVZEC10/5bRxP7kNaSDs4C/aCs
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3124 5068 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232.exe"C:\Users\Admin\AppData\Local\Temp\8e1e8158bccc88ba3a6de9a6bb33ba3f86fd48a8f2ed8b7894479c4ce2ad9232.exe"1⤵PID:5068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5068 -s 2282⤵
- Program crash
PID:3124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5068 -ip 50681⤵PID:2500