Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 07:48
Static task
static1
Behavioral task
behavioral1
Sample
6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe
Resource
win10v2004-20220901-en
General
-
Target
6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe
-
Size
828KB
-
MD5
fa251801c04898f74dfbedd2656be6af
-
SHA1
c9e35b789a92e854dac2ae03448827ae3f371f58
-
SHA256
6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f
-
SHA512
a6ea0ce0f2e8638c1ca4a97bd824431f3f31cfc7657014ed49f5d9ec725ac1370972acbd48977102b702ca58694c1f62c31c4f54a3a9fc06f941b956359ead59
-
SSDEEP
12288:+S9V7NxbVGLByxOWirmTfdnlT5W8KEsXz7o4GMn4z+OIWHsgI0mSAohv7MJvshGX:RjVGlUOW/f3T5mn/nUIEsgXYkhS
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4820 4396 WerFault.exe 6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe"C:\Users\Admin\AppData\Local\Temp\6241f851517d428607b94bf87ca86e533c34e4018dc6a6544a359d455844fe2f.exe"1⤵PID:4396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4396 -s 5122⤵
- Program crash
PID:4820
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4396 -ip 43961⤵PID:4856