Analysis
-
max time kernel
169s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2022, 02:14
Static task
static1
Behavioral task
behavioral1
Sample
8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9.exe
Resource
win10v2004-20221111-en
General
-
Target
8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9.exe
-
Size
28KB
-
MD5
1bcb9ffa7cb750a485fa374736096717
-
SHA1
d0c48985af9e8e84fac8ef4b05375080f4760870
-
SHA256
8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9
-
SHA512
6ac5a2ce7c901a09bff9c94c6934083492889c3aa21211690493f56ce1e12634df0e19f55efa57dad045a38c4cb1bb92a70608e7e775d76bd3c8700bd4fa19e7
-
SSDEEP
192:VnY4IPKLnVhfO04aDOa6lgUGLNf6H+eqdmmothfgZOK+cKecG:VrIPKTVo04aqjl5GBOqYJbfgZOKJKa
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1248 1528 WerFault.exe 82 4296 1528 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9.exe"C:\Users\Admin\AppData\Local\Temp\8c70c3cd7d0c4c8adc771bb0bb404b3c6418ecf67a9e3fd44a52023602e43fc9.exe"1⤵PID:1528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 2682⤵
- Program crash
PID:1248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1528 -s 2842⤵
- Program crash
PID:4296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1528 -ip 15281⤵PID:2312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1528 -ip 15281⤵PID:3384