Analysis
-
max time kernel
90s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
04/12/2022, 13:15
Static task
static1
Behavioral task
behavioral1
Sample
eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884.exe
Resource
win10v2004-20220901-en
General
-
Target
eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884.exe
-
Size
24KB
-
MD5
ef024b0b345fff65182b2a5fd062463c
-
SHA1
39e58bc86293333da8e0f82c89a6734976edfc94
-
SHA256
eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884
-
SHA512
d5eed34f72a46f67f09f106712c161426ce4d4918ab7bb6de8279f1ce179e662d834a1a6201ef70eec3d4b647001abac59d9f1add6934ec492d7741ddfa7ef90
-
SSDEEP
192:pamo5zEdubAAGEMQJEROWmSVV5fOy0dNs/84A7LSf5aXdD2E045pQ:cmo5zEdubAAGMTWmqvfOW/8T72E045p
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1920 4836 WerFault.exe 80 2100 4836 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884.exe"C:\Users\Admin\AppData\Local\Temp\eec738451e28b0f8789778e4bf547906a7efe6cdf6b106be90aaf6f70ad98884.exe"1⤵PID:4836
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 4042⤵
- Program crash
PID:1920
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4836 -s 4082⤵
- Program crash
PID:2100
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4836 -ip 48361⤵PID:2864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 396 -p 4836 -ip 48361⤵PID:1652