Analysis
-
max time kernel
200s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 05:50
Static task
static1
Behavioral task
behavioral1
Sample
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe
Resource
win10v2004-20221111-en
General
-
Target
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe
-
Size
1.9MB
-
MD5
69c870bdcf23e022f4d34143f9ffcc30
-
SHA1
dab98ca0cbbe417b05290779558883a7195437f8
-
SHA256
ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f
-
SHA512
cb0d0a75b91e10a16e6dfc21454f32594780fa2961bf49ea350cef9ad3804323b3720a83ccff8620db37b0c984d542a05d0a09975d7033c72b3c2b4dc6f49a72
-
SSDEEP
49152:Ws6HVnfBRX6CCM+wVvpMxDBpwz3rhabYBr4/bgZzyaujx:l6HdpRXwM+wlpM3iz3/Br4/b3au9
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5080 2216 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe"C:\Users\Admin\AppData\Local\Temp\ada4e6238b32e4b5fd9b73f17b0b869890ca0bbef6ca8027bfba1b8847ccdc0f.exe"1⤵PID:2216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 4162⤵
- Program crash
PID:5080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2216 -ip 22161⤵PID:4948