Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 12:49
Static task
static1
Behavioral task
behavioral1
Sample
8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1.exe
Resource
win10v2004-20220812-en
General
-
Target
8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1.exe
-
Size
93KB
-
MD5
31113e8cb663b00604a19d8a4a4a3054
-
SHA1
37e000d1e941639fa8797130f94219a975ef6dda
-
SHA256
8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1
-
SHA512
1ba622f01171356b669a0058fc878827a907754a89e3e224a7e0868fe9b9645b5d3dd9d3b5de885ca5feb289d7a80fc18bf5c30bc516dbf83fd1a95a2a3d1f66
-
SSDEEP
1536:mmXubivqTgbEznMnwFpMy0fmmnOHFD3gmbvgkofALQkSxNobfGR+GR:zebiyTtznMwFpAufHhgmbvgkoIBSzuun
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1132 2672 WerFault.exe 73
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1.exe"C:\Users\Admin\AppData\Local\Temp\8ec0d30a5dd3278f9acfa7ee3edd7e02fa1b0f02200662c234373aedc7a35bc1.exe"1⤵PID:2672
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2672 -s 4042⤵
- Program crash
PID:1132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2672 -ip 26721⤵PID:2252