Analysis
-
max time kernel
232s -
max time network
251s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:55
Static task
static1
Behavioral task
behavioral1
Sample
df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe
Resource
win10v2004-20221111-en
General
-
Target
df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe
-
Size
392KB
-
MD5
e3ceb19a134337344a1158434a70144b
-
SHA1
7107852e36e65729148d3ef1f9c47446eb67127b
-
SHA256
df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4
-
SHA512
b21d4451bd3b65069405839052579cf16d0ae97d188c3f46f14b777c1ee30cf796167471bc8966296740e4b1e68fd68ba1676ed516c3178340033cc45fd62ff7
-
SSDEEP
6144:0aUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3d4MLk0x:0VCJibvNYJbxYYgbRke6DSMLk0x
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3008 4252 WerFault.exe df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe"C:\Users\Admin\AppData\Local\Temp\df89f6ddae784c9ac9eed9b3bfa0167309e162ace1acdd7f66d61ab4d60ed9f4.exe"1⤵PID:4252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 3842⤵
- Program crash
PID:3008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4252 -ip 42521⤵PID:2640