Analysis
-
max time kernel
147s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 07:27
Behavioral task
behavioral1
Sample
bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe
Resource
win10v2004-20221111-en
General
-
Target
bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe
-
Size
100KB
-
MD5
70f530e68920f756d048a4f3b4cb6c29
-
SHA1
7de02005a1b2a6b5613519962b0437acb91da94f
-
SHA256
bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c
-
SHA512
d54b6796d8ac27e78a11ec7fb646de583ae61ce2850577df9079612b6e5b6f7e86838af18e8c9867b031b0bef0be6c286a80c61fa71eb2c2c39c8538bbf1519a
-
SSDEEP
1536:xzRfPMnXaPhtMT5O230uo5lUdgLKL55yUwoX+7ftAYLppnkOhaAD1p6504y2g:xzNPOaIE2Hoi55Lw/yYvlw6X6zBg
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3396 2240 WerFault.exe 83 -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe"C:\Users\Admin\AppData\Local\Temp\bbc6b9c98533aa4d5804b2bd7bb87ac00bad970c176ba2c25c6e5e781e47d40c.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2240 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2240 -s 6442⤵
- Program crash
PID:3396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 2240 -ip 22401⤵PID:1524