Analysis
-
max time kernel
161s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 15:37
Static task
static1
Behavioral task
behavioral1
Sample
ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415.exe
Resource
win10v2004-20220812-en
General
-
Target
ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415.exe
-
Size
248KB
-
MD5
993dd44ad75a97c19ea09993251f8373
-
SHA1
90116a7bf74f33f9b28604402ed6cad2c93c7c6c
-
SHA256
ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415
-
SHA512
cf44bcb0f4b1b854d9fb59d4aa6acce7a8fa8b6d4ff891ef7fa691f5aa8be27de2a8ee8908b239b63c614514d2c10c265269ecaa7a9e0e41aa2769d642b9694a
-
SSDEEP
3072:pCQ6PkCsx7mQq+zoGUOapqD4SRjBMY2xd1MyiCejxY1LXkYqkeA9b6rNY5Wj564T:pObuEbpIh+Yy/+Y19b0mEMocWD
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2380 2552 WerFault.exe 10
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415.exe"C:\Users\Admin\AppData\Local\Temp\ab591d0c296c3e33149a6115198fc8c607ff55759b9ad38f9d4e9aab6777d415.exe"1⤵PID:2552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2552 -s 5362⤵
- Program crash
PID:2380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2552 -ip 25521⤵PID:1936