Analysis
-
max time kernel
156s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:42
Static task
static1
Behavioral task
behavioral1
Sample
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
Resource
win10v2004-20220812-en
General
-
Target
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
-
Size
812KB
-
MD5
91c51ccc13856811fbd1c1ba0207574f
-
SHA1
0542a6a20635cbdfb23159a35b57461fe34d411a
-
SHA256
d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df
-
SHA512
b96a6c34d0e33660d8a295a065825e210b4ec48ab72a07ffbf99556a8a607229eff50fc52ff2ea7225a52e5b7f52c007237416d21d377e088f2502f67219ec4d
-
SSDEEP
24576:gKv7qrQUDPFGVZRSIk8bGrz64tdB48boHeo:l7XOPAVZRSaGrz64rU
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4460 4900 WerFault.exe d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe"C:\Users\Admin\AppData\Local\Temp\d1295029b9fbc99bab3b5546ae8a8478559d7c28bfb388b3cc1a9e566ed428df.exe"1⤵PID:4900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 4242⤵
- Program crash
PID:4460
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4900 -ip 49001⤵PID:2256