Analysis
-
max time kernel
481s -
max time network
483s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-10-2022 17:49
Static task
static1
Behavioral task
behavioral1
Sample
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe
Resource
win10v2004-20220812-en
General
-
Target
7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe
-
Size
68KB
-
MD5
07edaf9e96f804bfe4da684025b6be37
-
SHA1
17b8cab275d90a3391e6fa3e1a9a602f89b80713
-
SHA256
88c74c96d8de753237e2927a6e1b81e41710121a41398902510d018daf4e400c
-
SHA512
5a3511bbddfa9bbb6ddf7ca334cbb66de967571e2705d6ddf6bc7934ac16e8c2db0d98397bfb1e67a77d47f074c9cb2ae47f2a9241a260efa3d3ec5ec3d00a18
-
SSDEEP
768:xFQbBuCExED5DDwP1yByU0yylKdwnYoKCVjL8G4GZfJUVhgH:gbsDuD5Ds410FKKQtG4IxUQH
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2616 4876 WerFault.exe 7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe"C:\Users\Admin\AppData\Local\Temp\7a1833f7b91269b9f0eb48f9bba3db9cc444f749d82255322e1f8e221612895f_dump_0x00400000.exe"1⤵PID:4876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 2162⤵
- Program crash
PID:2616
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4876 -ip 48761⤵PID:4132