Analysis
-
max time kernel
188s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 23:19
Static task
static1
Behavioral task
behavioral1
Sample
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe
Resource
win10v2004-20221111-en
General
-
Target
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe
-
Size
308KB
-
MD5
823e48e22548f3e780f090ac85dc117f
-
SHA1
363b8d6b283c1a299e58dfe1fcb45dfb173f6ab6
-
SHA256
a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6
-
SHA512
de8774ac3659d88eebdb943f9483072bd520b6a40e82caa7092591f06afdf2ad4a83953ff67dc8464c78f944eacd85bd070690d0f792b58dfda71f58e8d999c1
-
SSDEEP
6144:0C+0tfge2cZeWnsRJLWP/r1mbd3hAZsEguKUxdJfUkKObuEHlMv:dtb2tWsRgP/r63hSsyKgNuOe
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3624 1224 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe"C:\Users\Admin\AppData\Local\Temp\a992cb35f05a00b29785282ae5e384e30b5ccb1bfa973bde2bc25a25e99829b6.exe"1⤵PID:1224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1224 -s 9282⤵
- Program crash
PID:3624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1224 -ip 12241⤵PID:3532