Analysis
-
max time kernel
167s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 10:01
Static task
static1
Behavioral task
behavioral1
Sample
c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe
Resource
win10v2004-20220812-en
General
-
Target
c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe
-
Size
1.1MB
-
MD5
b0f346275260bdc8bd399154f3e75ca9
-
SHA1
a2ea09e08354fee78313e1cbbb51421536254ca3
-
SHA256
c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51
-
SHA512
3e12866a8302f99a2c94ddb33aab9d2e1aa3712d1966214639d268fd8d35fed2e0543c8f09503f4a64e28eb87fe1c25a54b1a3078484487ff7713b5b2cd855e7
-
SSDEEP
24576:0YvwF7N4/z4KgFFUIiXmFyGKTlU5Rk8fnIwR76uH:0YIF70OFFz0GKT25ewguH
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1292 448 WerFault.exe c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe"C:\Users\Admin\AppData\Local\Temp\c407364973c27bece39463724e9d5e3dade5c3d0627281e44aaab4b865307c51.exe"1⤵PID:448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 2242⤵
- Program crash
PID:1292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 448 -ip 4481⤵PID:1176