Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:16
Static task
static1
Behavioral task
behavioral1
Sample
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
Resource
win10v2004-20220901-en
General
-
Target
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
-
Size
186KB
-
MD5
5c51157a71db9dc58779866cf66a8570
-
SHA1
baed87d44cfab4c36a874670f8a195cddee2e5c9
-
SHA256
398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116
-
SHA512
5dfe4c8f383e7b0a0bec62ff1e12d993e085698bfcd15021fa80c2bec8e231771d7676eecf43c915cc687e0acb9c945871ce930e356255d55d66d51564abf88e
-
SSDEEP
3072:oaMUQPzXRarYU9a0Orv94RdM4vWHO69D/4LIk7PVQzJy8rm0lSca:oa2PlSReoqC76b1
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1740 3464 WerFault.exe 398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe"C:\Users\Admin\AppData\Local\Temp\398a2836fcd1e3b47fbb2ab37a772ff127ce41f6757bce42a42f917c7afca116.exe"1⤵PID:3464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3464 -s 3762⤵
- Program crash
PID:1740
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3464 -ip 34641⤵PID:1128