Analysis
-
max time kernel
91s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-12-2022 02:02
Static task
static1
Behavioral task
behavioral1
Sample
cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe
Resource
win10v2004-20220812-en
General
-
Target
cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe
-
Size
925KB
-
MD5
1be9bcedfcc0deba15d36f3fc86aa45c
-
SHA1
2ebfc47f72051d5289c3a5d02ba92f289182c9eb
-
SHA256
cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d
-
SHA512
33a07b6a74742f1a12a9d06f3f2be980c7fde236114020b4bf7448b42c81feb7b9833799d7dc3239b7ca1ab3f7678ea2e86684e12221c047149c9e7807e39504
-
SSDEEP
24576:OVDx8DrtRqKg1xTdFyTHVXxuILCJZeislxSyDjEtZSwTK:OVDxK/MdFs1XxuIWj4XwhTK
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4864 520 WerFault.exe 77 3248 520 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe"C:\Users\Admin\AppData\Local\Temp\cc9c8e9f4ffbb37cbbc63c8a75c6a21d34b64eb773416c4a89314b00a212ed2d.exe"1⤵PID:520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 5922⤵
- Program crash
PID:4864
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 520 -s 6122⤵
- Program crash
PID:3248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 520 -ip 5201⤵PID:3264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 520 -ip 5201⤵PID:4920