Analysis
-
max time kernel
151s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:50
Static task
static1
Behavioral task
behavioral1
Sample
bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe
Resource
win10v2004-20221111-en
General
-
Target
bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe
-
Size
211KB
-
MD5
2c67b9a0f27918d6fc34729d99a73a40
-
SHA1
015d651466d6109475b7e74bd3b58903c4bdf15e
-
SHA256
bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897
-
SHA512
a6707c5b57c26e86b88d9d949f56c32457500c6199da08be9a4a487aa9064759513533bf449ed3bdb701e218ee8a43c2a5c24ba251f756f18a913789949e3a96
-
SSDEEP
3072:EB1UZ1LnFrkdEx4VhogXhmqFHLrZd+xqY5P3LS/cIy72u/XdUwsdSSIDXQh464yv:E8DuEEEqV/Zu+kJ7OwWSS6XQxwF+
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1544 1364 WerFault.exe bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe"C:\Users\Admin\AppData\Local\Temp\bfc5e379aa08be4f00df380954ab07e1b830c1bcb97f0055fb9c93dff108d897.exe"1⤵PID:1364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1364 -s 4002⤵
- Program crash
PID:1544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1364 -ip 13641⤵PID:3140