Analysis
-
max time kernel
123s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 07:17
Static task
static1
Behavioral task
behavioral1
Sample
a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe
Resource
win10v2004-20220812-en
General
-
Target
a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe
-
Size
240KB
-
MD5
12819fe1e2657c2fde9c027ec2fa6b85
-
SHA1
e2b2150c8214c268abbc4dbe71c776190d490bc9
-
SHA256
a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c
-
SHA512
1dbd5239b559719a4ad438a279653ed1fcb0d9887834842c6f6d88d5ef1ab98e6609e7a31b58e42b392a9937c42317161686fb041372b17a349be724c55d533b
-
SSDEEP
6144:A+J0Q1PdsbZTHY8Yu3uD2ETjjfoQ7wVqQ3fn8zMHjjCmowyzZDnZ:AaX2HV3wjjfoQ7wVqQ/DjJ1yzJnZ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1704 4972 WerFault.exe a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe"C:\Users\Admin\AppData\Local\Temp\a997f627b9d789ee2bb5700a9f58eba81081e1ea376dc159195d91354d8fc61c.exe"1⤵PID:4972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4972 -s 2842⤵
- Program crash
PID:1704
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4972 -ip 49721⤵PID:5040
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4972-132-0x00000000005D0000-0x00000000005E2000-memory.dmpFilesize
72KB