Analysis
-
max time kernel
149s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 16:21
Static task
static1
Behavioral task
behavioral1
Sample
d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95.exe
Resource
win10v2004-20220812-en
General
-
Target
d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95.exe
-
Size
99KB
-
MD5
1c5e1cc5120d8b6086de94ae5035341c
-
SHA1
d930be56e03c72a5dc691bb8a74721ed8f77f4f1
-
SHA256
d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95
-
SHA512
c2c5816887cd9fcf03ecb03904fd8519d0b842f0afc4a668ff5da681949e878fcdfcc57fbe1895e5a02e3f459f360174521db25da8e4de9eab93a7654ca74a22
-
SSDEEP
3072:XfQdx/gCO1A4uiYmmsdY+gusEji32SgqJHjvkbr:vQLgn1A4uiLmiqX2SgaHjsv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2040 5108 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95.exe"C:\Users\Admin\AppData\Local\Temp\d8e8a3d7ebe6d5a7cb682bf47e12fbd44eb89d61306c3ef3fe2da9de9733bc95.exe"1⤵PID:5108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5108 -s 4042⤵
- Program crash
PID:2040
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 5108 -ip 51081⤵PID:5052