Analysis
-
max time kernel
145s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2022 09:06
Behavioral task
behavioral1
Sample
9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d.exe
Resource
win10v2004-20220812-en
General
-
Target
9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d.exe
-
Size
86KB
-
MD5
b4a3c23552705ef309511abccfb623ee
-
SHA1
3f6e549dc6c9094f3a8c1b1c53835f378acd1609
-
SHA256
9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d
-
SHA512
d5c5a06dcc7e4d45cca7fc03232c49a428e86547d8eebf01a4ab5a44786e4d7605a9895389ceabe3b2781d1bc26a8805f0e899ae49eb807960a27bc79e27c124
-
SSDEEP
1536:bvyHnEHCGJwNkLv00epQqjmwD6bYlWV6yLLPHoiDEgsf2oAkExXZVOgI/OZe0EJ4:eHEHBxg1jmwDwYlhELH4pfMkE5ZM7Ws
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4200 1260 WerFault.exe 78 4824 1260 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d.exe"C:\Users\Admin\AppData\Local\Temp\9704abf39f2e14f42d9a218d0fc68b2c5f344bbd776044cf6b28bc6c988bf88d.exe"1⤵PID:1260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 2522⤵
- Program crash
PID:4200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1260 -s 2642⤵
- Program crash
PID:4824
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1260 -ip 12601⤵PID:2116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 504 -p 1260 -ip 12601⤵PID:4412