Analysis
-
max time kernel
93s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 08:39
Static task
static1
Behavioral task
behavioral1
Sample
947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556.exe
Resource
win10v2004-20220812-en
General
-
Target
947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556.exe
-
Size
333KB
-
MD5
62dce527f013c4af99223267a2c86ed5
-
SHA1
c8c723a87f8aa7165add1c66c68be73a3046618c
-
SHA256
947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556
-
SHA512
9661972c40e4489cda549481209550514712848e0e4cd6fb2e41de283bd03dd6fb7e2bb87125a80306b0a076ab3add02ec53098e46a5982b4d610d80faeedb32
-
SSDEEP
6144:hdkCTLdP5aJ82CJTnjYx27uNsQ2sj0QI/O7szMMoK8:QC9P4JR9x2Whj5seszf78
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5032 1484 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556.exe"C:\Users\Admin\AppData\Local\Temp\947af71aa2c1bef21add0f5b8d26df56727e3c79150c3a1c8cd6c6b6661d9556.exe"1⤵PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 2842⤵
- Program crash
PID:5032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 1484 -ip 14841⤵PID:4940