Analysis
-
max time kernel
157s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 01:04
Static task
static1
Behavioral task
behavioral1
Sample
89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07.exe
Resource
win10v2004-20220812-en
General
-
Target
89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07.exe
-
Size
388KB
-
MD5
af672a1849e762b8136490a824c1135c
-
SHA1
2eecea197a39c983b68a2ce33c593368658c1e3b
-
SHA256
89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07
-
SHA512
3a0083bae2b0cf509c69791f56ce5b9a7532accf6acb3a2a08f83c704599ad20f7c27efb24a3c440517c1ce2e094dc6d1e8586172507d03408f04fb05d0582d5
-
SSDEEP
3072:e2voeN+jaiG17Ef5KlrKnBZ59oZSmveDlcjIV8jlwIaU+V4EFFCcll3H3rH3XD7U:ZQeNai17Y56rKnBfWhveajzxwIaU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4324 2740 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07.exe"C:\Users\Admin\AppData\Local\Temp\89ca9131577b7f4e019463aca2b470990e8f65ab8f03a7e861ca77e9c32e6d07.exe"1⤵PID:2740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 2842⤵
- Program crash
PID:4324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 376 -p 2740 -ip 27401⤵PID:5084