Analysis
-
max time kernel
166s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 14:40
Static task
static1
Behavioral task
behavioral1
Sample
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
Resource
win10v2004-20220812-en
General
-
Target
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
-
Size
809KB
-
MD5
a99405104904cd2d04b7aa85856a5bcf
-
SHA1
2ed9da3ccc24f95adb35e6cad9d72bb13d09e3b3
-
SHA256
2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9
-
SHA512
cdeed8162c44c7edeb00a7a706fd66686ee9b4deb4db84b6f75478ca1d2703eeadf4ed774a26d9b558c7a3a4c2566fc5e89f66134f470ab7e98fab71331fffdf
-
SSDEEP
24576:HW70tKdcLt5es9/a2MAd1iqB1eyvIvrzEsRKn:y0YdcZ8s9WAviCoyvSrXKn
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3404 384 WerFault.exe 2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe"C:\Users\Admin\AppData\Local\Temp\2f78b2e27f8f3053e1167152b5181a27f70cba86686d72ba314e26cc70d9b0a9.exe"1⤵PID:384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 384 -s 2962⤵
- Program crash
PID:3404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 384 -ip 3841⤵PID:4300