Analysis
-
max time kernel
138s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2022 14:40
Static task
static1
Behavioral task
behavioral1
Sample
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
Resource
win10v2004-20221111-en
General
-
Target
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
-
Size
688KB
-
MD5
14f07df673384b69cf2be3b22c8ffa01
-
SHA1
0004238289ff4c3bcccd02fe9e5f261e286eb719
-
SHA256
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df
-
SHA512
eb0bf9a4e548a453ad976ebbf3977969c82319c6c77e80561999618de2eab297b2116c37c62440f310b692f034ad3fc3a3eef8e7e6ba6aa3ee550cf6caa2f7ff
-
SSDEEP
12288:7s4ulzbJMF1nVEyO0w6YVzonayF9wNPnEhFRH/pQYS9sixN/PBvt7o2kJUKh:7yJMPukw6gfyF+NshFTg7nBvJkJTh
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4712 3496 WerFault.exe 82 2028 3496 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe"C:\Users\Admin\AppData\Local\Temp\3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe"1⤵PID:3496
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 5042⤵
- Program crash
PID:4712
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3496 -s 5642⤵
- Program crash
PID:2028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3496 -ip 34961⤵PID:5060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3496 -ip 34961⤵PID:2932