Analysis
-
max time kernel
187s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 14:24
Static task
static1
Behavioral task
behavioral1
Sample
4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe
Resource
win10v2004-20221111-en
General
-
Target
4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe
-
Size
388KB
-
MD5
6b517b976741e8b06ba739b003530d16
-
SHA1
30bafa8d88952edc3811ce5651783f0da48ddb62
-
SHA256
4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a
-
SHA512
1cb50f23c98b2598dcae256ea973566021c8fdc8dbcebba07cfc5f7560a46cfd3c96021f91ccdd7b2ac44018b3158f59cbd9f6b1b73387e4d1f90bbe158d349e
-
SSDEEP
12288:BoZ+5Nin/gbuQKJ5LZBvLURi8eAVG4sWtTCwd7j:gquQadsVtsguwdv
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4256 1704 WerFault.exe 4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe"C:\Users\Admin\AppData\Local\Temp\4a8fb05e4bcb32e1c9c98b00140d91146c8551a7e94a86f4bf06488958b4117a.exe"1⤵PID:1704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1704 -s 5122⤵
- Program crash
PID:4256
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1704 -ip 17041⤵PID:1948