Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:49
Static task
static1
Behavioral task
behavioral1
Sample
e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe
Resource
win10v2004-20221111-en
General
-
Target
e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe
-
Size
550KB
-
MD5
7e3a1ae9ce4c8971933e5f16ad58df02
-
SHA1
0cf6ad94c3e739696826b57b55e70b55b2a6d5ec
-
SHA256
e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac
-
SHA512
407ee9095273f61d61361f0475be4ae9ed5c69154fef00be6b18d419fbed644c07d051a62c9d8b797c9bd059636df9de5a44e8607dc8fb4059901d9ee48136a8
-
SSDEEP
6144:pBG8ZoIbalOX5ZyEWwRnJNGn84AgI8rlzM2YsCkbZRiY1VGpzlb91mzR:RZo/O/51a8VgIwzM2jCkbzP14PGz
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2324 3916 WerFault.exe e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe"C:\Users\Admin\AppData\Local\Temp\e6d31067e6f6c2f0f250e081e73018ba07a7542288f8c0ed4f7075d6b21132ac.exe"1⤵PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3916 -s 5642⤵
- Program crash
PID:2324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 3916 -ip 39161⤵PID:1768