Analysis
-
max time kernel
146s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 12:42
Static task
static1
Behavioral task
behavioral1
Sample
f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe
Resource
win10v2004-20221111-en
General
-
Target
f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe
-
Size
396KB
-
MD5
ea41c5db457c9ffc1b5b9123221566dc
-
SHA1
0ef072528ffb999640e3bff8c7f85001f2ca960a
-
SHA256
f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740
-
SHA512
70012d25e6bc2d5fff590a07c1395feb391c082d0d9ddab0b59d63a30c57c460601e9029c0511bd56fde10e7d69b5c54b8aaac1455206efd3a8da9674797d46e
-
SSDEEP
6144:eTlJp5MaZRlT24+X7EkxwpS7a953X47wi1UlaawbMIBi95LH4Iiei:Qvp5ZN+XjxsAwi1PZtBT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4136 3532 WerFault.exe f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe"C:\Users\Admin\AppData\Local\Temp\f3a3ae83655aa66ac1878f7a9bf6e994541f85e3f51b001c853d5f8aac382740.exe"1⤵PID:3532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3532 -s 5722⤵
- Program crash
PID:4136
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 3532 -ip 35321⤵PID:3984