Analysis
-
max time kernel
231s -
max time network
252s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 01:17
Static task
static1
Behavioral task
behavioral1
Sample
4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe
Resource
win10v2004-20221111-en
General
-
Target
4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe
-
Size
1.2MB
-
MD5
09b29dcef702cdf32ca51a3bee8459cc
-
SHA1
6d1aab303f58c4e4d8fac9382234bfcd32ede7da
-
SHA256
4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48
-
SHA512
08c68cbec843fe7afe3042daf09f95bd4e561f6a1649691568fef0f8e1050515c428e786f0f3aecc5167fdfe4711ecb694ad9fe49bf98f23893d816100bd66d3
-
SSDEEP
12288:nqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4EySp:nnajQEPnvg6PhWDC75Up
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 868 4856 WerFault.exe 4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe"C:\Users\Admin\AppData\Local\Temp\4059236734e9f38234817f574fe77399e03b561e9923b505f0ddd6103762ef48.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4856 -s 5122⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4856 -ip 48561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4856-132-0x0000000000400000-0x000000000052E000-memory.dmpFilesize
1.2MB