Analysis
-
max time kernel
156s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 17:05
Static task
static1
Behavioral task
behavioral1
Sample
90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe
Resource
win10v2004-20220812-en
General
-
Target
90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe
-
Size
3.4MB
-
MD5
67ff7135cda8b9314deb666b14256c7c
-
SHA1
25dc3c7c0281cdc4a55743e6c3faa3d6babff031
-
SHA256
90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643
-
SHA512
9dcf81ce26d6f2d9bcb15a1c4ccc9ae0e21d181f7813fe4ff5c04b8995312a849b20830a6379d436843be069894347fb246229b4a735243b0949482fda7c9577
-
SSDEEP
98304:6F/2+PLt0YwGMf0e3JpZElQ2Fh4vr40mhOBe2r:61VPL2GMfH5ElHFh4v806S
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2736 4232 WerFault.exe 90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe"C:\Users\Admin\AppData\Local\Temp\90a181a6a771a88cd38179d4a60cea2a3a88eed946aed6aa1a7838d0428f6643.exe"1⤵PID:4232
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4232 -s 7602⤵
- Program crash
PID:2736
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4232 -ip 42321⤵PID:792