Analysis
-
max time kernel
191s -
max time network
214s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2022 23:10
Static task
static1
Behavioral task
behavioral1
Sample
c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f.exe
Resource
win10v2004-20221111-en
General
-
Target
c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f.exe
-
Size
20KB
-
MD5
f8d74ce83c9c9b9154dc293c422e97ad
-
SHA1
a2d0fa3fd4ff3c5d0beb8e4b0330fcc5be69cecf
-
SHA256
c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f
-
SHA512
2cdf23120146e1e666e0fa5939cad6d43ca6ced98e1f6e19a6f10862e1bd2366e0b184e5f9eb0669e1bc7299520b2ecd44fe2ca363289282bac3dddac452696d
-
SSDEEP
384:5K9Qd1VrkqhcXSNmxpcQBxkFldwRrAHvZEGOjJJcJE+oz1AZ4Bwv:kE1Vrk+ci++QBwrSrAHRETjMXoJAZ4Wv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4252 3272 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f.exe"C:\Users\Admin\AppData\Local\Temp\c8c048669b058dc2e8846b2fb7669dd66c7626401d310b34fdbea2b4af8e3c1f.exe"1⤵PID:3272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 2242⤵
- Program crash
PID:4252
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 3272 -ip 32721⤵PID:4192