Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 13:15
Static task
static1
Behavioral task
behavioral1
Sample
ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362.exe
Resource
win10v2004-20220812-en
General
-
Target
ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362.exe
-
Size
844KB
-
MD5
a2a804fd19675ebe491f3b515aa60dad
-
SHA1
14dbedf4b27a6edb3988d4e2d999ae511841c2bd
-
SHA256
ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362
-
SHA512
16b2b8b6432f32cde8136c5c56f568d540d541cb3326b84e36ea43d6b860aa8ca9b339347594aea61830905143a4254c7bc8cbfad2a73d98db59e09c74759ce0
-
SSDEEP
12288:iv/JfKk6/1x0WI3i1Z8cH/ayOD7sDnb7Pl7J1hC4eUQ1SBKCN:ivRfKk6/1iWI3iXOSnPNJ1Y4vg+
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3756 5056 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362.exe"C:\Users\Admin\AppData\Local\Temp\ce8731bd6bc62f3a6f6a32ffb98f6f3c76886f118ee0c46d3937a6cdcf5eb362.exe"1⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5056 -s 5442⤵
- Program crash
PID:3756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5056 -ip 50561⤵PID:4416