Analysis
-
max time kernel
147s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
07/11/2022, 13:45
Static task
static1
Behavioral task
behavioral1
Sample
3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36.exe
Resource
win10v2004-20220812-en
General
-
Target
3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36.exe
-
Size
809KB
-
MD5
07d7371c9e45faf37e40dd5bc6916020
-
SHA1
368662cb8425632185a77336e5b8a37afacab610
-
SHA256
3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36
-
SHA512
00f70aecf525e2a6483b282735ec725f1264ffb5ad8b4fae7910d42015b95140b9ae1ed9e6af8f1be5d990943ae9a749e6230b50cac336df044b3d3d15bd0be1
-
SSDEEP
24576:eJbuDW3+CY2Gc6LdAVRYbv3gsN3o4jmcjocmMXW:IqDVH2GTuevTlo4jmcjoc
Malware Config
Signatures
-
Program crash 3 IoCs
pid pid_target Process procid_target 1264 4984 WerFault.exe 79 3052 4984 WerFault.exe 79 2480 4984 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36.exe"C:\Users\Admin\AppData\Local\Temp\3338d87ae5e8bc69a75774a5c75fa0931fc7228c8259168833e57f713143be36.exe"1⤵PID:4984
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 4962⤵
- Program crash
PID:1264
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 5042⤵
- Program crash
PID:3052
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4984 -s 5322⤵
- Program crash
PID:2480
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4984 -ip 49841⤵PID:888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4984 -ip 49841⤵PID:796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 4984 -ip 49841⤵PID:456