Analysis
-
max time kernel
19s -
max time network
2s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-12-2022 03:08
Static task
static1
Behavioral task
behavioral1
Sample
926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc.exe
Resource
win10v2004-20220812-en
General
-
Target
926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc.exe
-
Size
72KB
-
MD5
901cefa5768e9ee951e47698741ed46b
-
SHA1
058fd6d6ba654a5ade409a49738c3fc53bc4ecd7
-
SHA256
926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc
-
SHA512
123c27ccd4d0643823a1760ddad0a27468c71d25ec35cf337be556a2d891c7b81cf6553a74ecf6b066f096c39f27175ec4e429ca8956138fcb290356df5d415f
-
SSDEEP
768:xDkfWemN0AQn7N6c2V7RfPrkHr8fxCU3imrGf+DmjpiMH19kF4x4UwNsQd4iML:qfWeK0tgc2VVLpffqHjpp19VxRw6QLML
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2440 1544 WerFault.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc.exe"C:\Users\Admin\AppData\Local\Temp\926d5c93246a2eee01751c44b621c7c33e1877b0139d45da19af5c604a46d4fc.exe"1⤵PID:1544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1544 -s 4882⤵
- Program crash
PID:2440
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1544 -ip 15441⤵PID:2416