Analysis
- max time kernel
70s - max time network
132s - platform
windows10-2004_x64 - resource
win10v2004-20220901-en - resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system - submitted
29/10/2022, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
Resource
win7-20220901-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
- Target ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
- Size 148KB
- Sample221029-add3msddbp
- SHA256 ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5
- MD5 002996b20f729826f491f41a41ce7020
- SHA1 afca095abc9ce5b77a32c1d36abd5bc60770e967
- SHA512 892c73cf100e958c3811d0d8aa7d9ba18cf0bcfbf0807f9ae8ce12422075fbca334d3c314438978f5908860208c5b074b316ec80adf51bd1d7d22db0a085239b
- SSDEEP 1536:gFboDGLlb2EDOA0f63luk+t1uDmV+2Po+I0whO9ChAf/dQ22ERKOreG3GBqkJZ50:kLVi7a+t1uA+vgDHG22EY6bk9G2qX
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 552 4280 WerFault.exe 15 2232 4280 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe"C:\Users\Admin\AppData\Local\Temp\ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe"1⤵PID:4280
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 4522⤵
- Program crash
PID:552
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4280 -s 4602⤵
- Program crash
PID:2232
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4280 -ip 42801⤵PID:3816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4280 -ip 42801⤵PID:1528