Analysis
-
max time kernel
152s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 00:50
Static task
static1
Behavioral task
behavioral1
Sample
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe
Resource
win10v2004-20220812-en
General
-
Target
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe
-
Size
502KB
-
MD5
1622b2ea1ea1950b0e52c2c20fbd3ac0
-
SHA1
3ac595a36c3079484c9ce85d07b2569aa10b2adf
-
SHA256
a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a
-
SHA512
622064e45a06a717e70e2db564a42ac1151a12e8709f4fdd236bd3529622d9205871c67039c8c771ac3df8c47b38e8cb143b1153aafc911de7de75a0ffe49fcd
-
SSDEEP
12288:jSmbN/XnX1HNOF1LeQ3jBZnhWZqkQCJ6m4H1Ph1ADO:jSmbN/XnXDwh3jBZWqbWyHpp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3144 3880 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe"C:\Users\Admin\AppData\Local\Temp\a822b90b88e8aad9a799b7c8f9c9e9932fe51f11d8f319b46e26b1931dfb7c3a.exe"1⤵PID:3880
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3880 -s 7002⤵
- Program crash
PID:3144
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3880 -ip 38801⤵PID:1948