Analysis
-
max time kernel
202s -
max time network
211s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 17:07
Static task
static1
Behavioral task
behavioral1
Sample
2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe
Resource
win10v2004-20221111-en
General
-
Target
2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe
-
Size
352KB
-
MD5
5f72734a1fd89193202d60f0bb9230d0
-
SHA1
abcc9a94b72db9f4c9aedcdad2891f974cd74992
-
SHA256
2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810
-
SHA512
29b75ec199e35541d2bc347e62f2423f46c2f79b19a1c971717f379505f955f095da1a0927a6791321650cdfe924db8b9ba4282d00f601d438241dc32363f5f9
-
SSDEEP
6144:UGPEvbL4+tRfb9puSt/jbO/4MvJZju0WBD3HGpzo0naGO:UpX4+tRfb9Z9O/pviBWPaGO
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1400 4456 WerFault.exe 2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe"C:\Users\Admin\AppData\Local\Temp\2e3c510e8507247efe31275a42f020c99736b0b84d011d85d16f0cc2435ef810.exe"1⤵PID:4456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4456 -s 4922⤵
- Program crash
PID:1400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4456 -ip 44561⤵PID:1592