Analysis
-
max time kernel
304s -
max time network
382s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02-12-2022 20:40
Static task
static1
Behavioral task
behavioral1
Sample
864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe
Resource
win10v2004-20221111-en
General
-
Target
864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe
-
Size
276KB
-
MD5
9d1bc30e6310f070e2f2a164f7946014
-
SHA1
05f119e25d5e1b9a76510b6c1c5e1d9569491091
-
SHA256
864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b
-
SHA512
e4d9dfea946730ad7d0deb83b3be8e704a0ecbc95a29f264bc823eee460b4fc619de5444e8d66343c73a7ee9d4c4f4886011c0787461dd14ed461ca7c53873c5
-
SSDEEP
3072:wnUoDiOA+cDnsOvEfvPK60XNn/3b7st+zUuZGfpA6hlU9/cMvlBh:wnUwXOvkvC9du+zhMBVhlA/Bh
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3172 4720 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe"C:\Users\Admin\AppData\Local\Temp\864b174acbf28e8236954b20010f6a58a371ee4f6d538bfe9a18da83894d8c9b.exe"1⤵PID:4720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 2242⤵
- Program crash
PID:3172
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4720 -ip 47201⤵PID:1916