Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 12:13
Static task
static1
Behavioral task
behavioral1
Sample
eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08.exe
Resource
win10v2004-20220812-en
General
-
Target
eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08.exe
-
Size
692KB
-
MD5
a9194c12701598c7abd628014c5e6925
-
SHA1
a7d9e573b7a5dacb038611909761556cbf52e43e
-
SHA256
eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08
-
SHA512
48b20b08218a0de0c95bd296603d47df3834993e143200722fb574d1df916e88ad14512c8803d259daacc6c785ade9ddeeb1442729dc9fe9d13bef18c00933dc
-
SSDEEP
6144:QGdIn7km79FPTCY1j/UTBJu/ou0oOn5KbyaMeKa0Rae6bkca1CcJ/VA+uXlpTXT/:XdI7buqrUTru/iEOaMYe6wrdCrTR1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1276 5072 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08.exe"C:\Users\Admin\AppData\Local\Temp\eeb339385713191c4ee34a6aeeb9161d802529289032fd4590381b0068ff5a08.exe"1⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 5442⤵
- Program crash
PID:1276
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 5072 -ip 50721⤵PID:5092