Analysis
-
max time kernel
84s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
19-09-2022 08:42
Behavioral task
behavioral1
Sample
411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938.exe
Resource
win10v2004-20220901-en
General
-
Target
411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938.exe
-
Size
34KB
-
MD5
48f0c3bea7361f9f390d932afde89773
-
SHA1
62844e3771b2269e3adcb2b81b37943795dbffe0
-
SHA256
411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938
-
SHA512
b336e926d6a6db0d36cf618548df63704580adc3420955107d083c1893f080363c1a34c85299a0fa1d3ca0048a1cc679b344e95a41b8e243b240af9c410447a7
-
SSDEEP
384:ZZRJGny1Tk++CfuazIxFI3wpd7LMlE6OmiGFvm0z4WsZb1NiDJ81uH7u00GhJO9X:ZMev+CfDzWF3909w1GJ7a0zJoph
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/364-132-0x0000000000400000-0x000000000040D000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 2472 364 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938.exe"C:\Users\Admin\AppData\Local\Temp\411b2ccc2dfb5f0256f41c5a14305e9b5ecaa27ed5856237d2bd2a0563ba3938.exe"1⤵PID:364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 364 -s 2642⤵
- Program crash
PID:2472
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 364 -ip 3641⤵PID:2168