Analysis
-
max time kernel
117s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25/10/2022, 17:22
Static task
static1
Behavioral task
behavioral1
Sample
c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_dump_0x00370000.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_dump_0x00370000.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_unpacked.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_unpacked.exe
Resource
win10v2004-20220812-en
General
-
Target
c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_dump_0x00370000.exe
-
Size
216KB
-
MD5
35a4063d9e82b6935e8564d4ded99f7f
-
SHA1
fc689a1a1c7231d6e8185f8fcaab19c9591e163b
-
SHA256
4a840d7798154bde79475df3e32200595f2242c49f31653d1a6b0560c4d1ef04
-
SHA512
c610080e0974b52cff4577830ba2de6c61c0426002fb4ff6dfaaca54793dad01609533e01faa31bf5048607736efa507b4a44b93269cb0cda57476ff7a310a1d
-
SSDEEP
6144:mZkASOH1gHc+Ss7GFIVqNeDyj0GZLHFAqshqqDQ:mZkASOuHhSs7iIVqNemLlAqscqk
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3900 3520 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_dump_0x00370000.exe"C:\Users\Admin\AppData\Local\Temp\c199fb2a7f5590a06c6f8a76c18bd60b0868b2c6040859ecab55b5fdab802f58_dump_0x00370000.exe"1⤵PID:3520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3520 -s 2202⤵
- Program crash
PID:3900
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3520 -ip 35201⤵PID:2116