Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 19:10
Static task
static1
Behavioral task
behavioral1
Sample
1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe
Resource
win10v2004-20221111-en
General
-
Target
1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe
-
Size
1.6MB
-
MD5
96c3d69608882152ec828540cb2115b7
-
SHA1
68d4f7a8eb6eec1e8eadaeb6a939b07ce6f5ea76
-
SHA256
1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03
-
SHA512
f638a0bed1972bf7a1886f3c9a12f33cd1a84cb83aa6580127e87dc37a16e8921d0c951081b4667c5e9a521bb97a81f91a75b02d58804c6f0180dbfc9120a4e4
-
SSDEEP
24576:+8B14u8XkMt1Y1xthCLubCcmkw4Zbv2Z7ZVIzOPuZCvUC7KChfgXYCqsYgXY1:dlGlSXZCvh7K9C
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1004 4316 WerFault.exe 1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe"C:\Users\Admin\AppData\Local\Temp\1f0a209da06b1a75e1ab1c7e2e11d2b61c2b8ca3871ecc93ef487d004d281e03.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4316 -s 10842⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 4316 -ip 43161⤵