Analysis
-
max time kernel
308s -
max time network
423s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:52
Static task
static1
Behavioral task
behavioral1
Sample
e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe
Resource
win10v2004-20221111-en
General
-
Target
e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe
-
Size
609KB
-
MD5
367943e472d38623f58054f83def4070
-
SHA1
72f9f602904fa5d4f8466946cd82138c865e9b35
-
SHA256
e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea
-
SHA512
9402ccb38fd360c3684226013ad0c25e2f54d84e50381b2b9cb52ce52ee8f7cfb9fba0be3a3f745172e7696d75df054494bd0549fe7baf49f83afcc4468f2cfd
-
SSDEEP
12288:Xyx5HXiZkNdgHfLCCrZZN+Ya8gFEPix+JvkhuzSQ0iJfx6Fk:XwS2SfLlrZZN+/SPY+JvkhuzSQ0ofWk
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3784 4532 WerFault.exe e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe"C:\Users\Admin\AppData\Local\Temp\e21476b5bb8edfa99fb2f1b0f23415ea5fe310788fcac594b524483967a38cea.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 5402⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4532 -ip 45321⤵