Analysis
-
max time kernel
51s -
max time network
152s -
platform
windows10_x64 -
resource
win10-20220414-en -
submitted
23-06-2022 15:06
Static task
static1
Behavioral task
behavioral1
Sample
67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe
Resource
win10-20220414-en
General
-
Target
67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe
-
Size
396KB
-
MD5
06df2e2f4197c66b1964b73556698fb9
-
SHA1
b79608334cf3c49b80b0f03064405dd10c25d923
-
SHA256
67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76
-
SHA512
b7a232a45db4515d71ba6e7ce9e9f89a42503438c4cf2de8070f278bbb39f9d3f7130dcb77910193eda53ffffd6140dd45d0f61d10ca69fb4907a3f77f349828
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 3888 1996 WerFault.exe 67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe 4168 1996 WerFault.exe 67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe"C:\Users\Admin\AppData\Local\Temp\67daa1e0ecb677e29049818401e280375170c5d3b7a4236d4ddd547218689c76.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 5322⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 6162⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1996-117-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-118-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-119-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-120-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-121-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-122-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-123-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-124-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-125-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-126-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-127-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-128-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-129-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-130-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-131-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-132-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-133-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-134-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-135-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-136-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-137-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-139-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-140-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-141-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-142-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-143-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-144-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-145-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-146-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-147-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-148-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-149-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-151-0x0000000000BB0000-0x0000000000CFA000-memory.dmpFilesize
1.3MB
-
memory/1996-152-0x0000000002880000-0x00000000028BF000-memory.dmpFilesize
252KB
-
memory/1996-150-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-153-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-154-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-155-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-156-0x0000000000400000-0x0000000000B56000-memory.dmpFilesize
7.3MB
-
memory/1996-157-0x0000000077E20000-0x0000000077FAE000-memory.dmpFilesize
1.6MB
-
memory/1996-158-0x0000000002880000-0x00000000028BF000-memory.dmpFilesize
252KB
-
memory/1996-159-0x0000000000400000-0x0000000000B56000-memory.dmpFilesize
7.3MB