Analysis
-
max time kernel
173s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 09:55
Static task
static1
Behavioral task
behavioral1
Sample
d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe
Resource
win10v2004-20221111-en
General
-
Target
d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe
-
Size
835KB
-
MD5
b140b08bc439534ab56a1bb8b5dd443e
-
SHA1
4a22576e59813ad296df046903607b4d9f871665
-
SHA256
d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92
-
SHA512
45a7b4f81d7c02732010d054bda603b77e405020e9427c3c0967f4336629ec29d49e6c2bc9b5775a6f6e783d2e2fa31b5374f24e3f69dcd3aab61b04cb684a4a
-
SSDEEP
12288:wd8KAXfJTxDZYQjZ8m7gjBjXxn4kToEabxAAccWcS0MsWcZq0Vsla74vh:wJAXhTxVYUZ8xFNnToL92cosP4BakZ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1524 2568 WerFault.exe d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe"C:\Users\Admin\AppData\Local\Temp\d734f6dd67dc70a97c0c6370c193bfff352d9d6c21a79e1aca6ce450d2c19f92.exe"1⤵PID:2568
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2568 -s 5082⤵
- Program crash
PID:1524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 2568 -ip 25681⤵PID:2864