Analysis
-
max time kernel
189s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:04
Static task
static1
Behavioral task
behavioral1
Sample
ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe
Resource
win10v2004-20221111-en
General
-
Target
ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe
-
Size
214KB
-
MD5
afbda4b02104c0c71c362e079f89c33b
-
SHA1
158cfd7600ba79c06688712bc60d74971400a4ca
-
SHA256
ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a
-
SHA512
abdef2ebebde8a281952b6fb040ca2c2040adf461acb53a4d0d90aee682e027d208d84b4e68c13818217bceea38cb586e119ced0903fb293ced23ed381cc006a
-
SSDEEP
3072:STtWiHdTYBitXNI/+bZK2FvFK5N2z0BgVTeh8n9f87P7Q2:+tW0TYBIXNIyO2z08Ch8p87Dx
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4684 3292 WerFault.exe ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe"C:\Users\Admin\AppData\Local\Temp\ce422a2f575a7ce0fcaad2996ced34162cbb946542a67f36b03e2457da084c6a.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3292 -s 4762⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 180 -p 3292 -ip 32921⤵