Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 04:38
Static task
static1
Behavioral task
behavioral1
Sample
cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4.exe
Resource
win10v2004-20220812-en
General
-
Target
cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4.exe
-
Size
140KB
-
MD5
c230a5f05971efdd3e67588a9a6c5734
-
SHA1
d8bce9b564cb280e68255d79b0ec5854379e49fb
-
SHA256
cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4
-
SHA512
be64cce8149fbf888efa014f2a9179a1713997c51902e546c947c69debcd8cd3556c8e1840f11c30ded7ee754e87a7e29e77eb35a6d3b3949e0a8d010e965f18
-
SSDEEP
768:SC3Hez0wTTMEMHqmglzK7q01WbfU/s/5QH+r4:hXrwTwEMilu7qIWbfUU/nr4
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3372 800 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4.exe"C:\Users\Admin\AppData\Local\Temp\cdf93faf6e3e22b3c0228cfbf54bb8637124a8c1735ddb075eeb79c2dbd78ce4.exe"1⤵PID:800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 800 -s 2842⤵
- Program crash
PID:3372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 800 -ip 8001⤵PID:756