Analysis
-
max time kernel
175s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:51
Static task
static1
Behavioral task
behavioral1
Sample
275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe
Resource
win10v2004-20220812-en
General
-
Target
275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe
-
Size
29KB
-
MD5
4347cac9cd1bbdb6f81bc3d68ac48130
-
SHA1
efc8d9945ac1f955c9a638ca0e5b1837b8940a8a
-
SHA256
275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a
-
SHA512
acc6e5522d0fece9dcec236fd095d74d9adbf8103e46ed0b634cd0a3dc8181921f5853a4215e419b973f63027fe6cbcd2b0a89c4e3c7238adb6744cf65213cb7
-
SSDEEP
384:A2sqxtyKFO86Mmc5/AyGOVbdTFWSHxRWnw/dblIPX2q/jSJueA/B2rFqqb:PFN6M1/4IbdTvZdBIT/xeAuFbb
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3812 4956 WerFault.exe 275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe"C:\Users\Admin\AppData\Local\Temp\275a8749e5fae90ebb7aa054d0a96be90b323d8dfe85858d9ba89f00f668414a.exe"1⤵PID:4956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 6242⤵
- Program crash
PID:3812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4956 -ip 49561⤵PID:3196