Analysis
-
max time kernel
81s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05-12-2022 18:46
Static task
static1
Behavioral task
behavioral1
Sample
917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe
Resource
win10v2004-20220901-en
General
-
Target
917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe
-
Size
731KB
-
MD5
452b47283f81693d2831fe174e3c7071
-
SHA1
0db4e087924f319012866bb793d7092418d1f593
-
SHA256
917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66
-
SHA512
558eb9206e1097ea2fee8508e88632aa9082280a43b7b9c637b309c85a03c02eb159d9c4f53f0dbab2eb0fca5238b3af4359320b1c20e8fb7902e9c82e7eb150
-
SSDEEP
12288:cRycOktU4g/n/t0EW5A0z/5vJwQ5oalK+G8y93vm7Ik61QQ52LwRg08y5wC1T83U:AxJU4gf2EW5A29Jr1k6y93vqIk6d3NKU
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2488 2732 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe"C:\Users\Admin\AppData\Local\Temp\917f17de082a3a550b47971a7f58dc01dcee0b890a6663bc3d487341fa7b5d66.exe"1⤵PID:2732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2732 -s 5202⤵
- Program crash
PID:2488
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2732 -ip 27321⤵PID:2384