Analysis
-
max time kernel
188s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 06:10
Static task
static1
Behavioral task
behavioral1
Sample
c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe
Resource
win10v2004-20221111-en
General
-
Target
c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe
-
Size
259KB
-
MD5
c0867486c67f9e2318b2b66496107d1a
-
SHA1
eed6ee3ebb02f771c43d29a1a09427be8794bc15
-
SHA256
c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2
-
SHA512
5b877134b745a9a74bc516d4159ceafa350af24fab714d43eb3cadfc5f8e9ad283b3c86e1ceb29b679c338fc709dfb6f1b3976b9bf8d45557e9f40606d756900
-
SSDEEP
3072:InnAQVG/LytaKItS/fiLKS+f5Aq7iIr27IsSJs/pVJzIxFY4PRUh2/YY3cn/QvS1:EOTeHI8HiL7+f5T4IlYxwFr5tE/T/
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 348 1536 WerFault.exe 70 3476 1536 WerFault.exe 70
Processes
-
C:\Users\Admin\AppData\Local\Temp\c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe"C:\Users\Admin\AppData\Local\Temp\c807bf84b883bf60c50163a625a16fe25554de9f9e60cf8888552417be413dc2.exe"1⤵PID:1536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 4802⤵
- Program crash
PID:348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 4842⤵
- Program crash
PID:3476
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1536 -ip 15361⤵PID:2708
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1536 -ip 15361⤵PID:1868