Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:05
Static task
static1
Behavioral task
behavioral1
Sample
cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe
Resource
win10v2004-20220812-en
General
-
Target
cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe
-
Size
421KB
-
MD5
832bb1fb1bedc1a6d3deb63d3636413d
-
SHA1
edbbff0b8c1f221eca26129bf59b2104e172e2e9
-
SHA256
cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795
-
SHA512
4b574aba9bd7a77d47af5febe502200e558c1004e7a3f4846526e852668e3d5a076abdd611804da5a897be094adcad21cbd257269fde5f31f5f012c3c9014829
-
SSDEEP
6144:Vv5x0A5+vNcUTcvaXJAjwKKx4DF9UQuscjSu3Oau+7qh7SVWl/iYus:F5x0AEveULotKx40QuscGxBP7t/iLs
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3752 4532 WerFault.exe cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe"C:\Users\Admin\AppData\Local\Temp\cdbdb6e1eb0e3b72b0338cead42409aabd1866a8524ebd66fcf4b0933bbdb795.exe"1⤵PID:4532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4532 -s 3042⤵
- Program crash
PID:3752
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4532 -ip 45321⤵PID:984