Analysis
-
max time kernel
260s -
max time network
276s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:53
Static task
static1
Behavioral task
behavioral1
Sample
be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe
Resource
win10v2004-20221111-en
General
-
Target
be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe
-
Size
462KB
-
MD5
438222b67d2300dd59c39270e54f0c7d
-
SHA1
83129b8a74a49375af68a49412436c0700f70b5a
-
SHA256
be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8
-
SHA512
6e9969a6a6c34b4878bf68a5bd54e02871028710d172ac40d20b457126c16faefdd3cdf91a2da2295d6e6ffbbe871f90ce00d88436997fa3c7f4ea98f1cf9309
-
SSDEEP
12288:mjEtdDbi3Edphw4OovzSlKctF3Wiq6PvnAvavv5:mIfDuUpw4OUzIr3WiqWveo
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3728 4392 WerFault.exe be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe"C:\Users\Admin\AppData\Local\Temp\be85ce1664fa4a3a202cd6502c5899517359399a8c51f9710d49d25bb64f82e8.exe"1⤵PID:4392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4392 -s 4242⤵
- Program crash
PID:3728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4392 -ip 43921⤵PID:4476