Analysis
-
max time kernel
191s -
max time network
231s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:45
Static task
static1
Behavioral task
behavioral1
Sample
5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe
Resource
win10v2004-20221111-en
General
-
Target
5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe
-
Size
321KB
-
MD5
2464355c63e0e31c9f013b79becc0a85
-
SHA1
925a116b78c88b240b0a75b5c5afeefaf36162d5
-
SHA256
5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba
-
SHA512
566dd42711232bfbe1c44ac6b9c12c3638c5be29a45a589d1e86cf0e36742f1ecc4b2281f1b87093a6b13fd47cfa7b256da2eb3ba534afec24a190cf75db65d8
-
SSDEEP
6144:eT+FQogd7PswMHScIOq1G/PJRnC2CkErfoe:RFhgkycBqwJRC2gce
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4472 4604 WerFault.exe 5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe"C:\Users\Admin\AppData\Local\Temp\5f713449823d914c2d75308e6475fda37bd86c87b3e20c8e81010894c8c357ba.exe"1⤵PID:4604
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4604 -s 2562⤵
- Program crash
PID:4472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4604 -ip 46041⤵PID:1460