Analysis
-
max time kernel
205s -
max time network
219s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:07
Static task
static1
Behavioral task
behavioral1
Sample
7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe
Resource
win10v2004-20221111-en
General
-
Target
7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe
-
Size
28KB
-
MD5
8b47b2b06584a152f9e4da10dffccefb
-
SHA1
de64dc0133874f3466123d8dd67cecd99e20ff25
-
SHA256
7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8
-
SHA512
01239128d141ce2d7d668ad3497bc4872a8034c06ec6d77c68dd149349e62afaf4c624cab96b4d59e3c02e46ae9f2a5019ac6ea654233c87b9428bb32791eae6
-
SSDEEP
384:udciobH4JwqLmI8orPA0PvxeEoxec5xsA93gineBWt9vvA5OOt:YBobHWwq1lc0HPsV93gCeBY9vvAoOt
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4604 3000 WerFault.exe 7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe"C:\Users\Admin\AppData\Local\Temp\7118edee1f41bcce1a9ff8a6fa4a34959242682c695d3f344e107739b4d781d8.exe"1⤵PID:3000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3000 -s 2882⤵
- Program crash
PID:4604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3000 -ip 30001⤵PID:224