Analysis
-
max time kernel
90s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 00:23
Static task
static1
Behavioral task
behavioral1
Sample
2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe
Resource
win10v2004-20220901-en
General
-
Target
2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe
-
Size
413KB
-
MD5
449d51cfbbca375effd9c4a5c90add20
-
SHA1
fed6d6e14bd5f4dc8153bf32d74dc854388f1fdf
-
SHA256
2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04
-
SHA512
6e5bd484062d1fe93555b01057c1f073a1dae3d1703cb90eed07d2a02e24c6ab5a9bd54fa3e610f8b8f62ea32edac48154522be627b4ce9bf80fa4adf8cb6d0e
-
SSDEEP
6144:r+B/QAY5X9vUgno2kJGj5xZg7PPZ4a/NElH1b0BrYIt9z4ti1g9lQKfCT0xyv7UN:r0Y5BUg59yZ7/NEgB0ItZWi1S/K0076
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2436 4844 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe"C:\Users\Admin\AppData\Local\Temp\2d70feffdfeb7bd2e61cdfaef815298e054c37b59d2ad7170b5a29c65f9a2f04.exe"1⤵PID:4844
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4844 -s 3482⤵
- Program crash
PID:2436
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4844 -ip 48441⤵PID:4592