Analysis
-
max time kernel
83s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
16/12/2022, 19:43
Static task
static1
Behavioral task
behavioral1
Sample
afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575.exe
Resource
win10v2004-20220812-en
General
-
Target
afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575.exe
-
Size
769KB
-
MD5
b130f6b2766f2c61415e597c1250491c
-
SHA1
40f3dd606795bfc9c630baec07dc55ac51751ebc
-
SHA256
afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575
-
SHA512
585b73ac4d63bc14a2a65bf01b079cb616d26c3f81678f0458c07d3b91336cc7981261dc9ef20badd0339c63034906004916027d28ab09a5ca32d0de9f129538
-
SSDEEP
12288:UkacsIX/CzCd274U/XJbPQx6kwn6RmHCzErS94LOb:XaDIXAAVU/XhPQ8Z6DQZ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2208 968 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575.exe"C:\Users\Admin\AppData\Local\Temp\afe6eda4beff3766b3ecde2a4e42417163afe5330000a80bc873181a6cf14575.exe"1⤵PID:968
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 968 -s 7962⤵
- Program crash
PID:2208
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 968 -ip 9681⤵PID:400