Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 09:08
Static task
static1
Behavioral task
behavioral1
Sample
d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa.exe
Resource
win10v2004-20221111-en
General
-
Target
d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa.exe
-
Size
74KB
-
MD5
7216a6645504cc4f06db80f879c722de
-
SHA1
bdea2c98b797cd4c6578e979f1fa58b31d9e13ff
-
SHA256
d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa
-
SHA512
30620657d2f2c56b01040a810188a169e911c61b03d3eeca65ad2c8215e59d5e895989dd0941d73c87430c473e37ba18014282aec26ddcac4ef7330462a19db6
-
SSDEEP
768:/Zx9fvq5n0p/tNm2XBwOS5nC6mraP4Z6gTYfsQN5hrt0l/4wsiHoCPHCI7yIYmY:/Zxtm22O62fTYU0t0l5snRJlJ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1272 1884 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa.exe"C:\Users\Admin\AppData\Local\Temp\d8dc41cf4b179f5e1e75821199319ad3a0904e81ecf59766308fa6863c9bb6fa.exe"1⤵PID:1884
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1884 -s 4082⤵
- Program crash
PID:1272
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1884 -ip 18841⤵PID:4908