Analysis
-
max time kernel
153s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:55
Static task
static1
Behavioral task
behavioral1
Sample
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
Resource
win10v2004-20220812-en
General
-
Target
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
-
Size
762KB
-
MD5
3697ec9b9e73cd9c420385b660367473
-
SHA1
566e6e8bb7fcda1aaf8d6eceab95aeff4490d465
-
SHA256
d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d
-
SHA512
ceea6e16eda147fc03e3e7a5c21a3be5b34fbd241cc22c87a2efd97c21cbd18c772a8101383e1ab0af931144ffb1eb715fb066d0d6bca456645af4d17690cfc4
-
SSDEEP
12288:UIymmaXrn/NKSpDmKRiNv+v4XwQTRMS9LnHwfTAOzHpphEeTK3ajIK/1h:UXI/NKS51TvUNTuSRn5a/hJ2qII
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3088 4320 WerFault.exe d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe"C:\Users\Admin\AppData\Local\Temp\d28e054e699c8117f01c22dc5d5698e0a0c9e9001ee41e2b59aeb69f05a57b8d.exe"1⤵PID:4320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4320 -s 3842⤵
- Program crash
PID:3088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4320 -ip 43201⤵PID:3132