Analysis
-
max time kernel
171s -
max time network
219s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 14:36
Static task
static1
Behavioral task
behavioral1
Sample
35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe
Resource
win10v2004-20221111-en
General
-
Target
35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe
-
Size
348KB
-
MD5
72824d86cc80d5db014bb3f5c6f38723
-
SHA1
ffea72c4bc18feb00df5f72c5412cde4275642ff
-
SHA256
35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d
-
SHA512
918f09b97f1863d16ba930947e2a65cefc135c06cf1eb703f4c43a45ec304b2385b1c5987f9c594487bd9ae04cf791d9684d6d5ed198260e5490b14ee8253779
-
SSDEEP
6144:GWqY+kKU4gfHAoQ269OST30JxRyrJ3ygjml87SPpTcYhBMUdwhVnepx:3zL4CAf9OST3fJ3QPnhnb
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3916 1032 WerFault.exe 35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe"C:\Users\Admin\AppData\Local\Temp\35f67fd8bd1dbedd6d5e3e7ea85e4d2cad1f744b63580af1bc5be3539a7a567d.exe"1⤵PID:1032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1032 -s 3042⤵
- Program crash
PID:3916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1032 -ip 10321⤵PID:1888