Analysis
-
max time kernel
284s -
max time network
304s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
07/12/2022, 03:58
Static task
static1
Behavioral task
behavioral1
Sample
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe
Resource
win10v2004-20221111-en
General
-
Target
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe
-
Size
306KB
-
MD5
1f6946cf0d713c43788eaec87fb875b0
-
SHA1
fa1c640854c05b5fcfa0792ca4d786165559ff2c
-
SHA256
77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171
-
SHA512
b3610104466b4d74e8a66b457ead673db069d6812b49e5d7d1ab7a9e1726fe1ee372d8309a5a4f129476a3dd71d8e2f3541dfea84c51bfd6eb09c1e01e547b66
-
SSDEEP
6144:Nq08EMJH46lRYNCCNXMv4dqldFhnNhN5f+bSvB7CCDhgZt67fk18XNf4L:NqSMxTleYCVMvLlHhPLPeC9cTC4L
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4732 4980 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe"C:\Users\Admin\AppData\Local\Temp\77b0a56a9a11861ccf97616158c8ee84115da3c30bfd99143283236280b2b171.exe"1⤵PID:4980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 7002⤵
- Program crash
PID:4732
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4980 -ip 49801⤵PID:3268