Analysis
-
max time kernel
306s -
max time network
345s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 14:21
Static task
static1
Behavioral task
behavioral1
Sample
4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe
Resource
win10v2004-20221111-en
General
-
Target
4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe
-
Size
420KB
-
MD5
03a3ba460df9e8fc378a3012647314fe
-
SHA1
82824fce8c8a881b5ba445fce74bd62137f2e26c
-
SHA256
4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01
-
SHA512
08d5135b2d4d257efdad8e92899fcdcbbb3360a21a64b52ad000b02fe95fda18536b22a16cc598024826c68a399a6d57f55ed66e68e458360ca8166ba96974ee
-
SSDEEP
12288:/kFnULIk9M22pZ2lqsCJzmRKyxNwrFLWCKsgqvX:/k1UL79M2a2cJJiRrxAWSg
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4352 1888 WerFault.exe 4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe"C:\Users\Admin\AppData\Local\Temp\4e35bc9e42987529bcad10eb8d49f80def7867081b7da595f091f71dd5b83d01.exe"1⤵PID:1888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1888 -s 5082⤵
- Program crash
PID:4352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1888 -ip 18881⤵PID:1324