Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 04:10
Static task
static1
Behavioral task
behavioral1
Sample
453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe
Resource
win10v2004-20221111-en
General
-
Target
453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe
-
Size
311KB
-
MD5
94633c05c921743ccd40ab340231e6d5
-
SHA1
77e0f020f9da41c6acbcba0373ee5f3e57b1942e
-
SHA256
453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb
-
SHA512
46af9e33ee3d4db42fe75816b5b8b84f3ffad762ce6d1d841bc05c861738322fa6171a78c4ab42d5a922329a40bfb57fb5ff79c7512da6fc6345efa4d1d051d7
-
SSDEEP
6144:3yeiuBlo8LCyd1dUhAE74jvaG66xegV+/mJC63WpP+tN1JB5k:3F1djaUq6QgV+OvwPG175k
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2000 4588 WerFault.exe 453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe"C:\Users\Admin\AppData\Local\Temp\453848cf8abbf1d8cf7d157d9ff3ca08243973ecab71ffdcb8769b83296d85eb.exe"1⤵PID:4588
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4588 -s 2842⤵
- Program crash
PID:2000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 392 -p 4588 -ip 45881⤵PID:1424