Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28-12-2022 02:40
Static task
static1
Behavioral task
behavioral1
Sample
5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e.exe
Resource
win10v2004-20220812-en
General
-
Target
5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e.exe
-
Size
1.0MB
-
MD5
7f71d45ce59d171df5d8dc49c34d1841
-
SHA1
2bf5fbe1dd66c6a8a0aac97eacb9d1b2ff940e29
-
SHA256
5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e
-
SHA512
5ed0442fcc8bf90cb62d9d1d6d4888adc1d984a765a1ecda9eaa3b7cb8c1bc97087de7c5af2ed7f12f5c4b010788839404a084b65bfb78ef615ce521c6fe34d8
-
SSDEEP
12288:oms9xDD6Yje7OObF3Os3dlAG44m0f1HFQHKLnVZiP1jBml5FzjtQz6SI:oPDiBOObvM4LH/LnVZQ1ElR2VI
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5048 1768 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e.exe"C:\Users\Admin\AppData\Local\Temp\5abe3bac61752ab2a41887a29a4cc4a2e3465632f2390792af7244764cabe44e.exe"1⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 8162⤵
- Program crash
PID:5048
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1768 -ip 17681⤵PID:4940