Analysis
-
max time kernel
173s -
max time network
236s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 19:56
Static task
static1
Behavioral task
behavioral1
Sample
3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902.exe
Resource
win10v2004-20220812-en
General
-
Target
3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902.exe
-
Size
399KB
-
MD5
26a0916bad2656e393c961d9ca4e66c3
-
SHA1
f0e76ce5081fba1a00291491bee120c7e8b4c492
-
SHA256
3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902
-
SHA512
4662d9ad3ec26f85207c05fa7c5f10467be92b40e17be0e9c560263b3a4808c4d5ee6a015a9e04cb51f7712b1f7b6bb3c01d3a48e4557aa592adfa1fb9836cb6
-
SSDEEP
6144:2wFB0iQ/M0hPoV0z1MN9S6a8yuZsVYqmxsqZJlfRaShWuhPAfba4PLpg/5927x:L0ih2oOW9HvZsOqTafZauUf+4DO32
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4124 4284 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902.exe"C:\Users\Admin\AppData\Local\Temp\3dafbf5e6f2e6660ee40b2de01a5edfa45facd84b1f50bc6da4c0b991c6fd902.exe"1⤵PID:4284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4284 -s 3962⤵
- Program crash
PID:4124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4284 -ip 42841⤵PID:4800