Analysis
-
max time kernel
321s -
max time network
371s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 05:59
Static task
static1
Behavioral task
behavioral1
Sample
c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e.exe
Resource
win10v2004-20221111-en
General
-
Target
c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e.exe
-
Size
168KB
-
MD5
3633dab4ff02d0082234ba0f79745bd0
-
SHA1
687b96c861f9fc43b61b0b2fbd1b1900190c5d90
-
SHA256
c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e
-
SHA512
c82d682d637f7e185411053eb4ad6c1f21755fa27a05b333439be3645be7798847edafa2a89ef7db6c4a042b4fd4129525ee03b371fdc3f8c6918d995422e024
-
SSDEEP
3072:YU6I0fX1KQCHbcb+mh20OIssrZDs8IxKPL0Zmj1X7sjLWrbTlP5Wp:YU6X1jb+mh2BIsy+Mftsmrnl
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4824 1008 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e.exe"C:\Users\Admin\AppData\Local\Temp\c9798d7676ec49b30209155490e5590d0d116b5b955b73dd4b7027004f3c138e.exe"1⤵PID:1008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1008 -s 2402⤵
- Program crash
PID:4824
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1008 -ip 10081⤵PID:1944