Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 15:24
Static task
static1
Behavioral task
behavioral1
Sample
2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2.exe
Resource
win10v2004-20220812-en
General
-
Target
2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2.exe
-
Size
200KB
-
MD5
07a57578f14dd6f4d7134dfa6ae7f430
-
SHA1
ed0d284e6135351267b984afc3fbec2cf0fbbab0
-
SHA256
2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2
-
SHA512
2229e0377f3e4d349d9d74a59222bf88a4650aa3c520d8a586c7f6ec944e7856bbe863345a4a1afed84acd6a4fe33beb66f879f9df3da2772920176c3cde3a2a
-
SSDEEP
3072:To/GyHh5rHZEeyMW+7zMfbkyO6jUAORgxVImJXVVX73s7jeVQulf9ls:kOgh+T+HMj3jUAOROVIIF9c7qVNllO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2144 1028 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2.exe"C:\Users\Admin\AppData\Local\Temp\2a25818366e23dd0b0612a674731142031602977eae9b50503b45f91f8edb9b2.exe"1⤵PID:1028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1028 -s 5202⤵
- Program crash
PID:2144
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 1028 -ip 10281⤵PID:1120