Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07-12-2022 03:07
Static task
static1
Behavioral task
behavioral1
Sample
ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc.exe
Resource
win10v2004-20220812-en
General
-
Target
ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc.exe
-
Size
138KB
-
MD5
dd496b65044e2da72f39d95da66bb192
-
SHA1
2ae433decec136ee05ae92bedcbdcd3564f264bc
-
SHA256
ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc
-
SHA512
7c698feb3fb0db07b40cc74bbb97e7d643a1397c7b41d3e3386119792db6eb50acbe9d2e47e8049b934aee8403ad5cc23ac9f6080df30280c25f27678ff2fca7
-
SSDEEP
3072:faB+SY0J90/rVbBvdRu803b/tk9yMJSTUrA2u3Zjm:w+ShJ90z1RG3xWSTdX3h
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4636 4996 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc.exe"C:\Users\Admin\AppData\Local\Temp\ab9619f4fc3c01429de61fcf4e7438820c241fd7e36ba03d483976946a5fdacc.exe"1⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 3162⤵
- Program crash
PID:4636
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4996 -ip 49961⤵PID:4468