Analysis
-
max time kernel
167s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 18:54
Static task
static1
Behavioral task
behavioral1
Sample
b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527.exe
Resource
win10v2004-20221111-en
General
-
Target
b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527.exe
-
Size
1.7MB
-
MD5
7e4bf7e116a45189fca105790f95deb1
-
SHA1
abfe17a734b697334b9cfbba921fa8418b195c78
-
SHA256
b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527
-
SHA512
a00dd41009b370d8a6638f82ed0bd42586b75ef30ef3fca3bd83138fe45545c181abf2fdc9199eea5c6748e28b9d647aa6054bee1582d1606641c282daaf8d2d
-
SSDEEP
24576:tITRaJ9aiW0G6AR9MdLL+kMtKqR6rvO4kAVQ6y+zvlnU/W8ZeeqG4MZ5gGSsF6Ri:udS9oQoQ+Trwj3VQD+zuua14c5ys8i
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3376 2008 WerFault.exe 19
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527.exe"C:\Users\Admin\AppData\Local\Temp\b9d5924debde16fdb301c63f56d47d6e72ec6740dcd02b099e661af794ad5527.exe"1⤵PID:2008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2008 -s 4082⤵
- Program crash
PID:3376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2008 -ip 20081⤵PID:4944