Analysis
-
max time kernel
321s -
max time network
369s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 12:40
Static task
static1
Behavioral task
behavioral1
Sample
8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491.exe
Resource
win10v2004-20221111-en
General
-
Target
8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491.exe
-
Size
353KB
-
MD5
b07e86e44f62150bf8295fa7282f25a4
-
SHA1
b7b35bceb0d2b68b87b7782769076bbaf6143324
-
SHA256
8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491
-
SHA512
cb822b6a086a8c1153fe569f2228d79bab66b01b52b7effecf188aee597b9a3b05c331843ef89bbbe273851f0db70e9818da6c231634ab039aea684460500243
-
SSDEEP
6144:ypiV83PO2XiHZ/ZYtlx6dPVJUoqBfHv/O/lviDjyGg1/4hYi:ysV8G2XsYlx6Sog/vmtviXyGg1/Mj
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 556 4512 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491.exe"C:\Users\Admin\AppData\Local\Temp\8ff6a439198573cc56818e11e60895b93368f9b32ba7b48b69d667bb9f013491.exe"1⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 4762⤵
- Program crash
PID:556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4512 -ip 45121⤵PID:4336