Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
18-09-2022 23:44
Static task
static1
Behavioral task
behavioral1
Sample
29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c.exe
Resource
win10v2004-20220901-en
General
-
Target
29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c.exe
-
Size
499KB
-
MD5
902e50773749d0b3b9599de577b120a8
-
SHA1
9204561e3f240b7095fce0613d0f11c039b85b0f
-
SHA256
29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c
-
SHA512
bdfc5d9f2084cd8256c1a8a195896e80a812d5a143be85dcd7cecc7a08976208fbb9ee39961b9c5030fdb7f941dcf793864f06f183f83f275967bdc7f0f1364e
-
SSDEEP
6144:y1/+A65HJx5s9XJI/5FA0OZUFgkcjNE/sLZ4P+gufZd5Yw7rc9:y1x66XJIRFA7UfcjNUYZk+Tv7
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3804 4340 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c.exe"C:\Users\Admin\AppData\Local\Temp\29dd168be286970655473be54354ee534900049a542d51f0ae3a40da7f16ad8c.exe"1⤵PID:4340
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4340 -s 5842⤵
- Program crash
PID:3804
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4340 -ip 43401⤵PID:460