Analysis
-
max time kernel
151s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:13
Static task
static1
Behavioral task
behavioral1
Sample
3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe
Resource
win10v2004-20221111-en
General
-
Target
3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe
-
Size
46KB
-
MD5
689c7582bb07c033ced1a934dce5b958
-
SHA1
221fdc64a8c06308fc8c0913ad3ac77016d89f6e
-
SHA256
3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb
-
SHA512
b22325b3c05d6fce183edf339b8233657fc8d4594a5c31f677b29449f301b1b5b5519aa2dc0943a9a7fc6ef0c552c5a598407206960144e4de52e2643d727be3
-
SSDEEP
768:vCK1Y9reNPkd5j6V28B0fIZt6ksAEvbOX5Bjze66CjdL0N8J7M8mi/2f/I:vCK14yad5U/J6ksVvqjzpBxQN8JQm2f
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 1952 3240 WerFault.exe 3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe 1492 3240 WerFault.exe 3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe"C:\Users\Admin\AppData\Local\Temp\3e3d16d10067512da6f6b4024557262dc82de7ffa43739f89bcf625107cf0acb.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3240 -s 4162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3240 -s 4562⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 3240 -ip 32401⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3240 -ip 32401⤵