Analysis
-
max time kernel
151s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 11:30
Static task
static1
Behavioral task
behavioral1
Sample
ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d.exe
Resource
win10v2004-20220812-en
General
-
Target
ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d.exe
-
Size
106KB
-
MD5
b32e4c6d3633b9e906b723b7a2508995
-
SHA1
0208f44952d10af512619743801dc7b140ca9e13
-
SHA256
ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d
-
SHA512
753842f17bb49056365b0739e441c1161442ec9baf0cf614e40ae47e155f1b4cd30cfbd110321b1603684005eb02385de389d8d3c119cd510f24c2381654f619
-
SSDEEP
384:/RQvCOG73+z23D9TxU4vIk/qD48+xBCK+hJS7gez:/OvCO4pPxSDkBC1S7g
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4112 3820 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d.exe"C:\Users\Admin\AppData\Local\Temp\ee37d34ceca9cc98eb5f664bb93b887257b7670908ce8ad36193753b8a09982d.exe"1⤵PID:3820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3820 -s 7162⤵
- Program crash
PID:4112
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3820 -ip 38201⤵PID:3992