Analysis
-
max time kernel
132s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 23:47
Static task
static1
Behavioral task
behavioral1
Sample
cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe
Resource
win10v2004-20220812-en
General
-
Target
cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe
-
Size
31KB
-
MD5
343515181ed30e9014ed5745061b1979
-
SHA1
c7cdf04f5903e7824c3d90b8ea18598f17c30347
-
SHA256
cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7
-
SHA512
ed00210dc762fd419838b94b46a99cdfa86f4efd9c7274f7d364c6089f0ff254a2260750eb5b5a5f20366e98cf3d30cbb3195034f24bdd52fc4106c4aa48a4c0
-
SSDEEP
768:Zmh7TzTBGixfTeiZSVW7hwEkns0L7OTLNfufC3:sZ5cEks8OTBx
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1308 5092 WerFault.exe cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe"C:\Users\Admin\AppData\Local\Temp\cedfcdec78aeb64e1545109d367342a25af2b4d2e8f3f562f6a0aa9939cee8c7.exe"1⤵PID:5092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5092 -s 2882⤵
- Program crash
PID:1308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 5092 -ip 50921⤵PID:380