Analysis
-
max time kernel
134s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:52
Static task
static1
Behavioral task
behavioral1
Sample
2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe
Resource
win10v2004-20220812-en
General
-
Target
2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe
-
Size
856KB
-
MD5
dd05e369ce7ea159d746f337f37d458c
-
SHA1
3b9475e72a703bf75ad36b62c9296ca9d19d74fd
-
SHA256
2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c
-
SHA512
57717594ba435db18432a0756a6a3a1912e44d31dba5952e50ba215e39bddf5e5ef36ff52e41480d34ae93397a3b2894734ac9b8f66767bd2f1d9c3c8c435297
-
SSDEEP
24576:95n2N3xSaLcflaVGge0g88vlS3AQH+2hzbhqYvZcI:H29xgfleG+g8Ol52hXMYC
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1412 4740 WerFault.exe 2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe"C:\Users\Admin\AppData\Local\Temp\2e35d338524837e7b1a6008215dac487d9ed0d856b30b30320b5268522ad760c.exe"1⤵PID:4740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4740 -s 3602⤵
- Program crash
PID:1412
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4740 -ip 47401⤵PID:2276