Analysis
-
max time kernel
142s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 03:04
Static task
static1
Behavioral task
behavioral1
Sample
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe
Resource
win10v2004-20220812-en
General
-
Target
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe
-
Size
163KB
-
MD5
894c94298da133668550e1e46c117a83
-
SHA1
1f618e9f55140b73cf15b46601337990d3cd61b8
-
SHA256
e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62
-
SHA512
1f03001927a3f6713ff3a2f4af8f91fdf5cfb039a1632ccf37f062797b6902b55d36b496025b500c2247fd6c8bd53573ecb5e1004f26b723f778873ed2a50cde
-
SSDEEP
3072:r8iTEN1vyO401ppJFojnjgJUpGpOydEXRZuiJDNkuNHnmz0+iausLQp:AiTEL6O40FsjjsUTydExJDN9NH9aVLQp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1296 1648 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe"C:\Users\Admin\AppData\Local\Temp\e9f12c57329fc224ad5da5bb06adcecca405b81c1ce2504d39867e7c78d42e62.exe"1⤵PID:1648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1648 -s 4482⤵
- Program crash
PID:1296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1648 -ip 16481⤵PID:1188