Analysis
-
max time kernel
149s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 19:40
Static task
static1
Behavioral task
behavioral1
Sample
c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe
Resource
win10v2004-20221111-en
General
-
Target
c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe
-
Size
244KB
-
MD5
5feef2236736c87bdd4e22dae28baf20
-
SHA1
5a2e2bcfb448fdf2dc9151e6b8792773e5cbe55f
-
SHA256
c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e
-
SHA512
05485c3244c6ef31e44ef64aec2328409be60e89ccf9158ea8cfc68e45759458d15627ae67bad226c03fd5e0af360765bf9449d3afcb8af8cf2875f78dd80bd7
-
SSDEEP
3072:PYujGyjmrXFF8bIFebOyjmrlyjmrOWMsKkjdJo4QCjyjmrZS+:PYujEb8mew1oCrE+
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2100 5028 WerFault.exe c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe"C:\Users\Admin\AppData\Local\Temp\c313db7d3ae70272b72eebcec00c990a89c9a554e67e5bf6b50e638232fc919e.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 8282⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 5028 -ip 50281⤵