Analysis
-
max time kernel
237s -
max time network
248s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 18:59
Static task
static1
Behavioral task
behavioral1
Sample
e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe
Resource
win10v2004-20221111-en
General
-
Target
e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe
-
Size
26KB
-
MD5
407c3a351ec9fd480e3c2775a450f03d
-
SHA1
726227aea2b1451248b6cca390b67973793423b8
-
SHA256
e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275
-
SHA512
a5dccb60b0c84272d1373500a90398439507e034a5a7eacfde285ba44fa85c4966281443921bc526f1f938787aac6327ea571edc261c9ff4866e80d065016320
-
SSDEEP
768:XGyqHyTDWLllQaINakYgy+rro4UAqEZ4J:2yqHyOR+a7DgyuroQqEmJ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1268 220 WerFault.exe e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe"C:\Users\Admin\AppData\Local\Temp\e844af4de42df4843c8384d753df13a70685c2020dea99faf56c62505a38b275.exe"1⤵PID:220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 220 -s 4202⤵
- Program crash
PID:1268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 220 -ip 2201⤵PID:3716