Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21/11/2022, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833.exe
Resource
win10v2004-20221111-en
General
-
Target
37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833.exe
-
Size
300KB
-
MD5
3118b1d4bbd567e89e9061fe57e5adb0
-
SHA1
38dc314a6d7226709406716048d9e431420a241b
-
SHA256
37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833
-
SHA512
1dcdc4c996f8221f58b0180c6fac38f3b0f67e10636e03f6e650d6736124235a0e758893a8b8b96255f1f0251e7e9defb7269eb79e7b93e685bc53aa5d8a8bad
-
SSDEEP
6144:MHT33KP4gbJzT6+Jygc0eOfsb80F5KSsQLH5Az:MDKPPJH6G3c0xfsb96SsPz
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1632 3064 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833.exe"C:\Users\Admin\AppData\Local\Temp\37ea8de2dc1a5a825f369d8e70b8d4cb9bad9cbb8ba0171cfe484dfd28c00833.exe"1⤵PID:3064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3064 -s 4322⤵
- Program crash
PID:1632
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3064 -ip 30641⤵PID:3112