Analysis
-
max time kernel
274s -
max time network
363s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 09:10
Static task
static1
Behavioral task
behavioral1
Sample
9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4.exe
Resource
win10v2004-20221111-en
General
-
Target
9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4.exe
-
Size
145KB
-
MD5
fabce5eb31b441f4134ec45a16ce2503
-
SHA1
0996fc435f0330e4bea1b4cb32ab54ebfb0788de
-
SHA256
9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4
-
SHA512
d918d3185ec9e3ac0846d5c3b25518f5b2320ccbccfce1bd4761d5d32764d729eddda12fc16f65601c2f75111c881d29ff2e283f0dd68c431eae2bae734b0602
-
SSDEEP
3072:qdTzcDWw3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSRSGSuSQSmSNS4SQSM:WSWw3yGFInROS5Aa
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 708 1064 WerFault.exe 58
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4.exe"C:\Users\Admin\AppData\Local\Temp\9f790f8316f118c40a31162e20f29635c5e2a72250227e09bc8812b689c3d9e4.exe"1⤵PID:1064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1064 -s 4082⤵
- Program crash
PID:708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 1064 -ip 10641⤵PID:5072