Analysis
-
max time kernel
149s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:55
Static task
static1
Behavioral task
behavioral1
Sample
096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe
Resource
win10v2004-20221111-en
General
-
Target
096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe
-
Size
420KB
-
MD5
59a1350b261d749e0abf76189f44b237
-
SHA1
c58fb471710ebc525bfbb290c9ec7625d09d35d7
-
SHA256
096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67
-
SHA512
e5110ed1d1a207925e8c29967d3a921be6f8ba75885532736776c3438668a66e871e0951ef2347e9504153947400cf19323461104ecf0788d347cde15e67e045
-
SSDEEP
12288:SMZ4uAeO7R3CG+BB/T/szOfgTCA2zcEdkNEWHd:SK3AeEwG+r/TEzlUu9
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3768 712 WerFault.exe 096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe"C:\Users\Admin\AppData\Local\Temp\096d030c5498985452ea911192b283a6fdeb5acc0db0a69a4cd5df1bf4087b67.exe"1⤵PID:712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 712 -s 7122⤵
- Program crash
PID:3768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 712 -ip 7121⤵PID:4172