Analysis
-
max time kernel
154s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 12:06
Static task
static1
Behavioral task
behavioral1
Sample
4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260.exe
Resource
win10v2004-20221111-en
General
-
Target
4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260.exe
-
Size
2.0MB
-
MD5
2a71d04634f0fe0b465065279805ff70
-
SHA1
c339d3b919edc6e6b422a4c5b5a2822b5e04925d
-
SHA256
4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260
-
SHA512
363f69a9134a9c67f8364ecb8b81a3789c212dc0e7a1f941502855b6663435b9da3dbc61b684967f7d235e3707b36d1d9b6474aef23bf1ce6bc287bcf59f71c1
-
SSDEEP
49152:JVzuSG92T8M5+1aCC1SGTxgs3ioyDZO+ZHhnyelagr:nux9g8M59CC1SGTG/oyDZO+ZE2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2312 4068 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260.exe"C:\Users\Admin\AppData\Local\Temp\4379656c4b3a8cec9cb1724cb90610748a917f494bd4fca38b2ee39100b5f260.exe"1⤵PID:4068
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4068 -s 5282⤵
- Program crash
PID:2312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4068 -ip 40681⤵PID:2292