Analysis
-
max time kernel
170s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:00
Static task
static1
Behavioral task
behavioral1
Sample
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
Resource
win10v2004-20221111-en
General
-
Target
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
-
Size
814KB
-
MD5
a6a2ebf504e3e931536553f47a0154f3
-
SHA1
627637b3e3bd986b585666a6640325f266803a96
-
SHA256
d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c
-
SHA512
3628a6b55451e02f8f198908b01faa0bf35dd878e10ce09d6000a7cd24a9ceee7544114c1d085c1a309c83c88eaa2a1c5149e2f13aa85eebaf999c34a2c84b91
-
SSDEEP
24576:O6wt4n74Xwt8pUAbaugmSzWpg4yNODBG5ot:O6mnpPTFpg4yAo5o
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4220 1348 WerFault.exe d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe"C:\Users\Admin\AppData\Local\Temp\d48f1fe0c68a1a550ec5075fa470df5a6b801250cf0213860232948fb1dcf67c.exe"1⤵PID:1348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1348 -s 3482⤵
- Program crash
PID:4220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1348 -ip 13481⤵PID:5068