Analysis
-
max time kernel
92s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:52
Static task
static1
Behavioral task
behavioral1
Sample
2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe
Resource
win10v2004-20220901-en
General
-
Target
2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe
-
Size
184KB
-
MD5
4efcd92bb8f56e14b1d8345e9d2cfdcf
-
SHA1
9114bebb091e41dd0ec1e637972b275f7738f070
-
SHA256
2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6
-
SHA512
e579d61d0f673fdc45fe957063026e60080ff00c785df22f44eee0632a3933dd06d44f72307588cf7ed375224613f9fc3e2ac00ae7bb8a3b400744b37b2344a1
-
SSDEEP
3072:YDb6Fv76nbvsMcZ3eawlI88rnXD2olnb4oQZiEyXpjg:yIv76nbvsh1eI8onBVW5
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4516 2692 WerFault.exe 2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe"C:\Users\Admin\AppData\Local\Temp\2b52f7b84e08309f7d7430e72e9712a351c00b5c5c7fc7ef0cff50b755b6ffe6.exe"1⤵PID:2692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2692 -s 4082⤵
- Program crash
PID:4516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2692 -ip 26921⤵PID:4652