Analysis
-
max time kernel
151s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 10:23
Static task
static1
Behavioral task
behavioral1
Sample
a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe
Resource
win10v2004-20220812-en
General
-
Target
a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe
-
Size
80KB
-
MD5
c04ef8bc00d27ef1a00c76bc87f31b63
-
SHA1
5ddae4e0300daafe71c6116653a972d2b390344c
-
SHA256
a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52
-
SHA512
513d7c00be30d1503f881a4449abe62e20bb9a26281437ec68d6536ff862c0efb1f1fe992b871ba2de95da6af97ceb1321e44841cea4285f59f3ff2b40e47b6a
-
SSDEEP
1536:B4OslC5xUp7A9DbPT5ZmfM5QOjAp8SxwfKtap4d+bakPMb7o5JlIp:/8C5qmND9c05QOjAp8SxGK+bx0b7o5Jo
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3156 5060 WerFault.exe 80 4408 5060 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe"C:\Users\Admin\AppData\Local\Temp\a2f25ae138e96bb9821959847371a613e6ca378e2314000cdffd4b98d7e6aa52.exe"1⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 4562⤵
- Program crash
PID:3156
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5060 -s 4722⤵
- Program crash
PID:4408
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5060 -ip 50601⤵PID:396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 5060 -ip 50601⤵PID:3176