Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-10-2022 21:40
Behavioral task
behavioral1
Sample
3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58.exe
Resource
win10v2004-20220812-en
General
-
Target
3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58.exe
-
Size
281KB
-
MD5
83fbcb92edf75b4c53533c76567c72f0
-
SHA1
a427f8c1fc78ffbe15fe060fa1705c1412a47d1f
-
SHA256
3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58
-
SHA512
4c3a25bc373cc62c307b5044e06a6cafa8054a03536d224e0bb810bbdccfef3eb460d267f5ed47f74d3578a8b2ad748e589088579349d6e99e5155e3eb1a1f90
-
SSDEEP
3072:qytrlBREwZN8OcIaR3pxFc6ZqcjxjS+2z0DIq3242KCAcgpihUnu3nq0imnm6gbn:qyI+NWBn75qlPOlppRCqPVkNG+Y
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2220-132-0x0000000000400000-0x000000000049F000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 312 2220 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58.exe"C:\Users\Admin\AppData\Local\Temp\3d46aeb95cdc94b370413669aa7395bb602c69545b2fc3fd8d0dcd670ad95d58.exe"1⤵PID:2220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2220 -s 4162⤵
- Program crash
PID:312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2220 -ip 22201⤵PID:4768