Analysis
-
max time kernel
200s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 14:02
Static task
static1
Behavioral task
behavioral1
Sample
e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c.exe
Resource
win10v2004-20221111-en
General
-
Target
e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c.exe
-
Size
451KB
-
MD5
18192ef3877ee89c2586495904bf9bf5
-
SHA1
a8d0b1e3ff57bdeddd4366b005d26fba47869257
-
SHA256
e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c
-
SHA512
e0567e4e598b80744a60f67cf8f70cfdb9964b662683fc34a4031837df4c24ae62a3d651eec9436e36633fc1be973dd8d1b0b81483d1b0db7cfa26d5f084215d
-
SSDEEP
6144:uwOMn8wkaCaOqFMxkE+hV+Nre55dP9pVMQTvyO4hhZWtii25ub5NPywweTOMuvC9:bxCxjRe5nP9pV3bQWT2w5NPyYOMsYVZ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2284 4500 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c.exe"C:\Users\Admin\AppData\Local\Temp\e0e0ea67c3d9c14ba90b46a05786c647a7e0ed84850d4c5cdb2997c3eb4d428c.exe"1⤵PID:4500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 4922⤵
- Program crash
PID:2284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4500 -ip 45001⤵PID:204