Analysis
-
max time kernel
178s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 12:29
Static task
static1
Behavioral task
behavioral1
Sample
824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53.exe
Resource
win10v2004-20221111-en
General
-
Target
824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53.exe
-
Size
607KB
-
MD5
9e4e0f9c1b1628d3f76db5dfbab1bced
-
SHA1
6461971a8795be8a46d01edac8b4cc5ba120d5b1
-
SHA256
824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53
-
SHA512
b3570cdf80cbdd6e7be26b9670dd9283abc78c8ea0054d83afcf4e13f628f37485596216a5800c50a4210c764fd48649fbc67b4df5789b0dd0f9ddada2b86e02
-
SSDEEP
12288:Jqw1I56CaT9yPJSYLRKWkAaup/1Znqrdrr6Janpg4ZW8yVQPgy:BvbQqQvzYn1ZhUi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5072 3220 WerFault.exe 36
Processes
-
C:\Users\Admin\AppData\Local\Temp\824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53.exe"C:\Users\Admin\AppData\Local\Temp\824e06056104251c6e7db0a9baa327d4ed3a7a3653b974851d470af33b796e53.exe"1⤵PID:3220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3220 -s 3722⤵
- Program crash
PID:5072
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3220 -ip 32201⤵PID:2920