Analysis
-
max time kernel
114s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2022, 06:08
Static task
static1
Behavioral task
behavioral1
Sample
603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d.exe
Resource
win10v2004-20220812-en
General
-
Target
603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d.exe
-
Size
229KB
-
MD5
6206c4c73c5534898d5c0af17387a860
-
SHA1
ffd2d47fc4638d5b11f0ffecdeb4e2189483c55d
-
SHA256
603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d
-
SHA512
d0eb7d492cfccff7e265b25d6d75ab26cad1529de41a10b611a449586554f19532f639ce532de8e22475ffc505b77db9c471a6d4e8da10b5a1af870fcb1fd5a1
-
SSDEEP
6144:O6AIGUnmKHzIWqzzyx8VLRip8SRjTqyl+HKL:DAIGUmKHvSzyx8Vop8Oj/l+HK
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 5072 3204 WerFault.exe 80 4380 3204 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d.exe"C:\Users\Admin\AppData\Local\Temp\603b66bb6667f9fd22ce09a280833e652a079fd14d7dbf438fb0a5d31f6b676d.exe"1⤵PID:3204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 4722⤵
- Program crash
PID:5072
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 5162⤵
- Program crash
PID:4380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3204 -ip 32041⤵PID:4048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3204 -ip 32041⤵PID:2716