Analysis
-
max time kernel
94s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:12
Static task
static1
Behavioral task
behavioral1
Sample
36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe
Resource
win10v2004-20220812-en
General
-
Target
36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe
-
Size
117KB
-
MD5
44a8513175c3940bcaf8464ad2b38c40
-
SHA1
58b70bcb66e06d0d6cc44e4e29e9736ebe052672
-
SHA256
36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514
-
SHA512
7b22af6199c32f10ad0131df6f59fb766964490489641858c90b2453b2d0f4a54baf37369265325f8c7eb96bf58a26eeb9047c9bde5ef4f08e74fdc0980537ce
-
SSDEEP
3072:L3YQAhnEyLDBHqzvG7PJRXmobCpMQHWaq3BrtvfLO:j/AeGP5bCKA23nS
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4976 488 WerFault.exe 36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe"C:\Users\Admin\AppData\Local\Temp\36762cef6205f5a038b626b568fefd52351bc6ccbc6ca84d6c589638abf8c514.exe"1⤵PID:488
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 488 -s 2242⤵
- Program crash
PID:4976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 488 -ip 4881⤵PID:4768