Analysis
-
max time kernel
164s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 17:18
Static task
static1
Behavioral task
behavioral1
Sample
7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe
Resource
win10v2004-20221111-en
General
-
Target
7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe
-
Size
318KB
-
MD5
59335d5ee2c17e97ce497160046e61a0
-
SHA1
44a520df65d05851f652948a5cf49038208fef9f
-
SHA256
7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd
-
SHA512
cba7c7fdef2347e3bc0adeeed9a455037eff5088a4396bf7e4934a3d5cd619183026b7447fe2fa2963032b1e502189a33484582d79ce1aa58d1464659699c65a
-
SSDEEP
6144:pUAqq3VAWdHm56SiwybqveHx3Z+QdOs21:2AqOm5yOveR3DQs2
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4592 3116 WerFault.exe 7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe"C:\Users\Admin\AppData\Local\Temp\7f3ff568632f83208cd9f6b44568cf0340c8ccb7c3532fe1f298525d459c74bd.exe"1⤵PID:3116
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3116 -s 5722⤵
- Program crash
PID:4592
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3116 -ip 31161⤵PID:3364