Analysis
-
max time kernel
51s -
max time network
438s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 13:34
Static task
static1
Behavioral task
behavioral1
Sample
9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe
Resource
win10v2004-20221111-en
General
-
Target
9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe
-
Size
436KB
-
MD5
6a79ddb4db70a5b9eede6cac89a7b65e
-
SHA1
0d5693342d648199ea8549d29dcda3615d9ea493
-
SHA256
9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727
-
SHA512
dc1d232b4d541197410ecfb5c9a8677aff5d62bf4bda3a96d53a69a569f8e98ea03f4885dc2621f92e31ad3c4cc4e791d4df6ca5d04c5757aa5cad11a17fd09b
-
SSDEEP
12288:HbWb0TsPzUmKT0Jv5Bq/k7Y9ysILBP5guci/46:bTsLMTHp9ysILBK9a4
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4248 4224 WerFault.exe 9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe"C:\Users\Admin\AppData\Local\Temp\9b66a2208a6da31769c4cb93310c18f5e4aed25ea286971bd304644b62306727.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4224 -s 7042⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4224 -ip 42241⤵