Analysis
-
max time kernel
152s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 12:47
Static task
static1
Behavioral task
behavioral1
Sample
ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964.exe
Resource
win10v2004-20220812-en
General
-
Target
ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964.exe
-
Size
55KB
-
MD5
dd7e6d3880015412aa447566936e104b
-
SHA1
466dd66a494f36b28d34e579864acda9cccf1e9d
-
SHA256
ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964
-
SHA512
c7fd38fac0332164c6f848656082e9cf713b8d655eac687084a0782bf8391f547d84e798ff1e7fd4f8de83eb9f143951b1a1bf40e488a43826896744d279edcc
-
SSDEEP
1536:s150K7Ci3Bi1C0QBcl1wBoeMahz0Q0WcMMMMMMMmMMMMKflt:60U5Bi1CxBcP5Cz0ljMMMMMMMmMMMMKf
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4644 3492 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964.exe"C:\Users\Admin\AppData\Local\Temp\ce8fdd03ebf2d44c57d16be35ac7f452a62830f3d83a606890cc3c58d3382964.exe"1⤵PID:3492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3492 -s 3562⤵
- Program crash
PID:4644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3492 -ip 34921⤵PID:4752