Analysis
-
max time kernel
187s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:46
Static task
static1
Behavioral task
behavioral1
Sample
bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe
Resource
win10v2004-20221111-en
General
-
Target
bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe
-
Size
716KB
-
MD5
4780b5422eb56929a826a8aea6345e72
-
SHA1
f7b562af913b9da29973e73a74cd290f7af3b987
-
SHA256
bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e
-
SHA512
37b5bc2fd69fc164832a2fd35d2e28d9e07eb2bfe60409485041e71740a8e51c4eff2d97563a91c311cf26893f228e35498ec434fd06b0526dc0b94efdc8fb24
-
SSDEEP
12288:wvw6ro+pQe1M2fr3fhFYGq6i0kaHKmJ/syPQHdqNyXovOi8kXg16J9KmxOnRE:crRQey2rXYyA78/svHsoqokXgAwoOO
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3220 4540 WerFault.exe bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe"C:\Users\Admin\AppData\Local\Temp\bcebc8e9c4275fd189e87da6a180c0f9bf6f92b8f83bec87ed518a61aaa9433e.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4540 -s 2722⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4540 -ip 45401⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4540-132-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-133-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-134-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-136-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-138-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-140-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-142-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-144-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-146-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-148-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-150-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-152-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-154-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-156-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-158-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-160-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-162-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-164-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-166-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-168-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-170-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-172-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-174-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-176-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-178-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-180-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-184-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-182-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-186-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-188-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-190-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-192-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-194-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-196-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB
-
memory/4540-319-0x000000000073B000-0x000000000073D000-memory.dmpFilesize
8KB
-
memory/4540-330-0x00000000006F0000-0x000000000075C000-memory.dmpFilesize
432KB