Analysis
-
max time kernel
98s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 07:06
Static task
static1
Behavioral task
behavioral1
Sample
b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4.exe
Resource
win10v2004-20220812-en
General
-
Target
b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4.exe
-
Size
289KB
-
MD5
552bcb6d22958688c6a54de938492a50
-
SHA1
2df2c9d6d69fa8e2cc2eed3a9675f6bbeb915f2d
-
SHA256
b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4
-
SHA512
4adb1dcf6d26834c87c57e3a6b31ea161adbd1ded17576d9d1224f2039c515997423b57ae593cef471f516e1d6a434d36d8ba4d1c88bbb110824da16fcf2cd7d
-
SSDEEP
6144:p8wD96W1LHhKNPQ2aX2oPrfDaGuG2DZ5pE7icFKqHotyUMZ8PELeliov:p81WJkNPQhtPr7aJd5S7VWtTOxLkiov
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5032 488 WerFault.exe 78 1084 488 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4.exe"C:\Users\Admin\AppData\Local\Temp\b2cb8c957ceaa5053ae92418a3cfe251c87f7d560716dac7b039c3d1fc58bfd4.exe"1⤵PID:488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 488 -s 2602⤵
- Program crash
PID:5032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 488 -s 2722⤵
- Program crash
PID:1084
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 488 -ip 4881⤵PID:4960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 488 -ip 4881⤵PID:4592