Analysis
-
max time kernel
174s -
max time network
186s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 10:12
Static task
static1
Behavioral task
behavioral1
Sample
4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe
Resource
win10v2004-20221111-en
General
-
Target
4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe
-
Size
554KB
-
MD5
a4bb650a27719f16b8f659f330891663
-
SHA1
cc467e611100b7e6694136e1303aee0f402793b3
-
SHA256
4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912
-
SHA512
93bbfc43612aa47a73a1afe598c3a0b8373dddc94e9672582e13824bd5c446b73edbabb60dca0a98fea95786aa98ed595eb5058069338e7e073b229d68ae2e74
-
SSDEEP
12288:YQjLuRE4xKR72qKoe/ZWsYUxUKQzZZQZsqtOqJ:nLueaKR72qKoe/EhdKYavJ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 216 1228 WerFault.exe 4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe"C:\Users\Admin\AppData\Local\Temp\4ddcb90086a6e2e9717a35af358fdb9e2cb7a4fdb861dd83b8e1bdff7d14b912.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1228 -s 2842⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1228 -ip 12281⤵