Analysis
-
max time kernel
169s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 17:05
Static task
static1
Behavioral task
behavioral1
Sample
3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe
Resource
win10v2004-20221111-en
General
-
Target
3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe
-
Size
264KB
-
MD5
06d24f3d4264f290bba2d20eff2a1dbd
-
SHA1
92cabed57e9f6270467d55b488df12782daeb1ae
-
SHA256
3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e
-
SHA512
d245474fbb29a794925db62430008bf0fc37a4e87f6547126a88850978eedb7e3d62ec9dfb9907ac4e6d6dcbd767e63a18e26be306790b68537f2dc4a7151893
-
SSDEEP
3072:ce0XbYKrM3n9pc3x/IYoI2CNyktCGn2NDvuPMBpDYhDPqOYqd5O6MBpcKLhfpil:SULnYBQY20nqgGunYW1SFM
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5076 4292 WerFault.exe 3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe"C:\Users\Admin\AppData\Local\Temp\3d94f7a82a937c0c7d52e9f0db2086c978f780c4cb4c854b4f8c1e37da63205e.exe"1⤵PID:4292
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4292 -s 2242⤵
- Program crash
PID:5076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 4292 -ip 42921⤵PID:3280