Analysis
-
max time kernel
171s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 19:04
Static task
static1
Behavioral task
behavioral1
Sample
9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe
Resource
win10v2004-20221111-en
General
-
Target
9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe
-
Size
186KB
-
MD5
43258958449d3aba481bdb7820aef6b0
-
SHA1
6d650585be1d4208aff8c01d6fc2703dc1466411
-
SHA256
9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03
-
SHA512
0c4c7b80c3ced3d65c4d341f81360fb15321becb4a68c7deaea35a3dc593a685b968342ff9816f937a320a6e2264c7b97b005e642ffe479101db177584f308f4
-
SSDEEP
3072:VsZdyw985mwEHuhDJ0EBsde9sOcaVdJVikengBoz1oHKFYlRrtxdvsuZh9:XcwMAJG0iJMUkRHL6+9
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1304 344 WerFault.exe 9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe"C:\Users\Admin\AppData\Local\Temp\9480474bb10417aaa4665b3f491cd84a40db970df179a651c2310e23ba072b03.exe"1⤵PID:344
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 344 -s 4042⤵
- Program crash
PID:1304
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 344 -ip 3441⤵PID:4716