Analysis
-
max time kernel
172s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
23-11-2022 21:19
Static task
static1
Behavioral task
behavioral1
Sample
db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe
Resource
win10v2004-20221111-en
General
-
Target
db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe
-
Size
3.4MB
-
MD5
64f5733c0424306e11231007374c9762
-
SHA1
ddbd0265599a2e33faba76b406fc9a1439d6a5a3
-
SHA256
db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a
-
SHA512
ba25f450d73db986b5af6564b3ff4288e9eb37099630eee4729c6b324cda92ed36e227b0073d2206e1187bfa916a652345a999fd5ae7125613b939db758f3718
-
SSDEEP
49152:oGYLAOjuFkrTW0lWU38uT4onfQuaKSiRJCrliOE60liAB2vG:oDLuFWTfECBFCsuG
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1972 4924 WerFault.exe db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe"C:\Users\Admin\AppData\Local\Temp\db55e630884d29de91ef6e3d2a99a40305568d23282f7b047aca41f68c42204a.exe"1⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 5602⤵
- Program crash
PID:1972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4924 -ip 49241⤵PID:5004