Analysis
-
max time kernel
215s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 21:40
Static task
static1
Behavioral task
behavioral1
Sample
d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397.exe
Resource
win10v2004-20221111-en
General
-
Target
d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397.exe
-
Size
190KB
-
MD5
fcf07ee6d74b448be40bf5377048741e
-
SHA1
3e781a184b1e2ccb052ffede7472ca7e578b6eee
-
SHA256
d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397
-
SHA512
ac53677fb801a927d03a4baeeb052e5eb4fe9d03a266a4768ef6d09d9d314e33029ee3b75bcb90b2f27cbb38754ae9e3e3fbbef53502ecf4221e9e25940140c8
-
SSDEEP
3072:0P4FJYI3wIPthmNdPS/o87SAWYIT47MFdhMceV9dl8SNHWSJvfk3Gn7KmtoVYGXy:ZJYIPDm82APt7M/hMcMsYvfpoVYOs3
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 868 5116 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397.exe"C:\Users\Admin\AppData\Local\Temp\d0221a1b1fefcce1c17f9fec93bebd8b0e94e7251905670a68f476fdec7c8397.exe"1⤵PID:5116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5116 -s 3562⤵
- Program crash
PID:868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 5116 -ip 51161⤵PID:3052