Analysis
-
max time kernel
91s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 13:47
Static task
static1
Behavioral task
behavioral1
Sample
ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe
Resource
win10v2004-20220901-en
General
-
Target
ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe
-
Size
8KB
-
MD5
043c3e64e9d9ef8f98d3e635ec42ff5a
-
SHA1
346f4d3ad029d6e81c0a09d196de25d08c3bed15
-
SHA256
ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02
-
SHA512
01f7e36d7072303ba056070cd1027a419ba6a76a3f0f859cf777621eebb2a8e90494fcbdea497d14f9d63fb681a8c8bfbb2fbc985d91d31929bddf4003f386ee
-
SSDEEP
48:ahuu85bl6oM8ErDLlDV0LYNUyBxj9K1FlKFhYberUxUkX:pVp1MHrDLlDV6mUyTU1FE+
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5024 4948 WerFault.exe 80 3980 4948 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe"C:\Users\Admin\AppData\Local\Temp\ed36c7e21dbbc0b5b43c315ae7456e45034e823bda2384fce5f3aed2fa1aaa02.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 2202⤵
- Program crash
PID:5024
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 2442⤵
- Program crash
PID:3980
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4948 -ip 49481⤵PID:3884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4948 -ip 49481⤵PID:4888