Analysis
-
max time kernel
149s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:13
Static task
static1
Behavioral task
behavioral1
Sample
2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe
Resource
win10v2004-20221111-en
General
-
Target
2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe
-
Size
44KB
-
MD5
f21b2f80537577073c351c618190b9bc
-
SHA1
87660a231901263c37349e09803d546496ecb636
-
SHA256
2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7
-
SHA512
b9c5a5e9279ffb46e06a00bc3d6973ede0352aed56513ba05eb2af39501b727966b2d56e3070861dbac3c1150579953139d62442a8dca4948595090c16c3f685
-
SSDEEP
768:BpDu9EEev5PZGU/AZ2cL9gGxmkYiXPvv4vfr5Nvzu6gnwN17qA4XSP4:HDoLeLfS9gGOiXPvAvnvz5gwN17v444
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 4264 2192 WerFault.exe 2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe 3988 2192 WerFault.exe 2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe"C:\Users\Admin\AppData\Local\Temp\2602ef0c001eeec03888dc06e4f8feaa54876b1ac7e8163546eef818323428f7.exe"1⤵PID:2192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 2842⤵
- Program crash
PID:4264 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 3242⤵
- Program crash
PID:3988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 176 -p 2192 -ip 21921⤵PID:4616
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 548 -p 2192 -ip 21921⤵PID:4508