Analysis
-
max time kernel
200s -
max time network
246s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108.exe
Resource
win10v2004-20221111-en
General
-
Target
f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108.exe
-
Size
26KB
-
MD5
8cb395771ecdb91768d91bd5697e5c19
-
SHA1
b48cbabc7de237b0c2fc18de4fefe8ba89e5d7eb
-
SHA256
f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108
-
SHA512
846812d1f3a05e1986dfa8c58eaa5af08d8bdd3e0ee576d58a5adb22874e38c2b0de61c306c985ec221a4dbddd2e20ca786040b308751f18c5cba307dc5e4061
-
SSDEEP
384:2iTo3URa+p3p0Yz6/+qTIWZtXizO7ymnawbEZ3CSbytUt0VS8s2ADp3fLLycWl/s:2v3IL3+TTIW3r7ymasEkg0dA8Nl/
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1916 4600 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108.exe"C:\Users\Admin\AppData\Local\Temp\f99449cb8b2d11963c460527b748f3de778c76546e0b64a7d5199224e5e07108.exe"1⤵PID:4600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4600 -s 2562⤵
- Program crash
PID:1916
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4600 -ip 46001⤵PID:228