Analysis
-
max time kernel
166s -
max time network
181s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 15:19
Static task
static1
Behavioral task
behavioral1
Sample
af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe
Resource
win10v2004-20220812-en
General
-
Target
af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe
-
Size
258KB
-
MD5
187f3d339331510105333ea095ee1afe
-
SHA1
1666bdffb656e685c011b8348628f1bdf7daa0d9
-
SHA256
af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33
-
SHA512
468c7f7c00f602bbcb0ddf0ce113f264b04aaeb79d32268e0651a7d02aeb835b1794166166252c9fad0a30a46d1d377a6883c1d1af724d7c70d546d2941816c5
-
SSDEEP
6144:/1gaAOU0Y0VKP41fslJ3H/8Fo0BWbZa24vd2wUFyVtJF6v:/1vKr4o0ola2W2wUspFC
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1504 2200 WerFault.exe 78 4348 2200 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe"C:\Users\Admin\AppData\Local\Temp\af487a12ac9a41214e0436c13d5f6558ba08fedd2168c090f91eafdac60c9c33.exe"1⤵PID:2200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 6402⤵
- Program crash
PID:1504
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 6602⤵
- Program crash
PID:4348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2200 -ip 22001⤵PID:3376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2200 -ip 22001⤵PID:2308