Analysis
-
max time kernel
154s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 15:33
Static task
static1
Behavioral task
behavioral1
Sample
d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe
Resource
win10v2004-20221111-en
General
-
Target
d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe
-
Size
58KB
-
MD5
2b35cf48a1b9476a3eec0f98eb52ddf0
-
SHA1
1c157381ee82cec1f9e71df34c2b2aaa84603c86
-
SHA256
d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9
-
SHA512
86c699d12f74c293df4916e9ae6f81e2c5ca9884fa051925d9f613b707cabf57ac467b27e2c9b2fb0ac45dcd550363598d8b89ffc8139b9a7d283f333bcc450f
-
SSDEEP
1536:3p6IL+KMUSgcwO8wb7jmTwKj7nVqqmvN6k1VEIoWun:3gKcgcwO8GwwKj7nYRXE7Wu
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1372 1200 WerFault.exe d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe"C:\Users\Admin\AppData\Local\Temp\d7ab216166c5845caa3b1684874b67d4c7c529cbe103d118b40d5d5c5744c2e9.exe"1⤵PID:1200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1200 -s 2922⤵
- Program crash
PID:1372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1200 -ip 12001⤵PID:2376