Analysis
-
max time kernel
163s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 02:41
Static task
static1
Behavioral task
behavioral1
Sample
bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2.exe
Resource
win10v2004-20221111-en
General
-
Target
bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2.exe
-
Size
698KB
-
MD5
0cf4559dcf6d581a79919cecc3e4222a
-
SHA1
0ec3266a17de090b984bcb6bc33323f5fef346fe
-
SHA256
bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2
-
SHA512
db6700a315b264bbd402c1d87b49248f38e2c1ec2d3f14d038b414fe6103b9f7ba1fee5baeaa1f31e688f21c01a61ed7244cc700d5f6557d5a3b202b589b841a
-
SSDEEP
12288:zfHuUy8ALS4G4CoW6jYt4g+UhYkfhHksfaX4WN3Hr3p47W2:apy+UhFlksfg4Mr12
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4216 4728 WerFault.exe 28
Processes
-
C:\Users\Admin\AppData\Local\Temp\bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2.exe"C:\Users\Admin\AppData\Local\Temp\bbc66878ce5bdfc0607f67610905486ad9bc7037402c2910dfde9ae28a15a4a2.exe"1⤵PID:4728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 2722⤵
- Program crash
PID:4216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4728 -ip 47281⤵PID:4252