Analysis
-
max time kernel
182s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 10:08
Static task
static1
Behavioral task
behavioral1
Sample
9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8.exe
Resource
win10v2004-20220812-en
General
-
Target
9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8.exe
-
Size
217KB
-
MD5
a73cf3e63b01bbf58c8a173c46e98b35
-
SHA1
8fa2a49d26fcf82b2c22768da9648730eb824f05
-
SHA256
9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8
-
SHA512
cf13d205521a2d4a134e852247730066e1ef2a7bf3375b077efebc673812b30f4f56ac14bf34be8a5144c70c9c671ab03c61909a1eef498c0d21e4bc7c67d23c
-
SSDEEP
6144:KgiUQrleRHb40wgneUBk6TMSoq+duaWgO7BoJt:KoQry4dgeUG5SoN/bJt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5108 4924 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8.exe"C:\Users\Admin\AppData\Local\Temp\9848f2772f74359641c803a5f76ea775998bc669b7731c68b9eb23460f1b51a8.exe"1⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 3242⤵
- Program crash
PID:5108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4924 -ip 49241⤵PID:4972