Analysis
-
max time kernel
150s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 18:53
Static task
static1
Behavioral task
behavioral1
Sample
e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306.exe
Resource
win10v2004-20220812-en
General
-
Target
e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306.exe
-
Size
224KB
-
MD5
01b8311bc3197c0060f2ce65d5e7c250
-
SHA1
2d030db77be5bd1026bc0558af6ec9d923f3c8f0
-
SHA256
e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306
-
SHA512
211321fea07e50fa634ea57027fd397d5e5660516ee801ff0c3a2b3383ecbaeeca4f74f0810d582c417016bf3b883f46ecc3b52e5a9340e8f2b4aa09ba34b153
-
SSDEEP
1536:jYdImjRnWvQBU8g5DGHPOGrwUbaxGAka+tHK9rCGaVkmwHnuqx8MOdzAbBQgRV:GjRnWvmaNUbaxqECGaVKHuqL6Abio
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3504 2092 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306.exe"C:\Users\Admin\AppData\Local\Temp\e3a3b2c67926638aa9b5c94145c81fa779a0f63ed62c6462db4e9e6d20861306.exe"1⤵PID:2092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2092 -s 4082⤵
- Program crash
PID:3504
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2092 -ip 20921⤵PID:1376