Analysis
-
max time kernel
161s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 02:10
Static task
static1
Behavioral task
behavioral1
Sample
fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d.exe
Resource
win10v2004-20220812-en
General
-
Target
fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d.exe
-
Size
448KB
-
MD5
ffc167c2a288c9c0fd8b3f9a5a7284bc
-
SHA1
47a59eaf5e6e5d6affd3a4e7f1a0cf942a883932
-
SHA256
fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d
-
SHA512
80390d7bc25f1b51dd9ba7f8585c8afc0a67047c4a4bf93910f3b6b582e84579ac5376716bcdf9c3f5af323643366e78c7d7bc86d502ca37ca89d622cd24d709
-
SSDEEP
12288:lypVSnM6jVZxriXA2Hili7q2WPbWlEXyiUD4KAmAxTqAmU3:0pVpwVOHi2nWzWrHaxWY
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4800 4528 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d.exe"C:\Users\Admin\AppData\Local\Temp\fa7eee54e6bd0806510a33b14879ebd9d8b6f6378cc989ecf06bd9f5bc4c9f3d.exe"1⤵PID:4528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4528 -s 5522⤵
- Program crash
PID:4800
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4528 -ip 45281⤵PID:4916