Analysis
-
max time kernel
182s -
max time network
199s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 08:26
Static task
static1
Behavioral task
behavioral1
Sample
cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d.exe
Resource
win10v2004-20221111-en
General
-
Target
cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d.exe
-
Size
214KB
-
MD5
c9dcc5eb160d5861bf50707b4badc7c8
-
SHA1
cc6802db9e5d8f60c6ec33c9a95610b96e119326
-
SHA256
cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d
-
SHA512
908712ce88fee096c758975939c518a1d98828d0a49a4d293b8c45f109d7df58107ee333c5f87400758deeeb787f26cb5446429ef8f643131f63b6325c675cac
-
SSDEEP
3072:d1nVSdSf/K544VFREde/ptsbn2ajuJ2Bo7z3/IRwifatGbQSj/yR+nnL6t0PF8Pe:drbi5XZaejsb2ajuJ2BCYfatGbDzKAm
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 972 4524 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d.exe"C:\Users\Admin\AppData\Local\Temp\cb8112b083a0990035d63a0bc51ad674c60f76c7dba4a4002b0e1aab8ff6b26d.exe"1⤵PID:4524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4524 -s 2322⤵
- Program crash
PID:972
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4524 -ip 45241⤵PID:4932