Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:30
Static task
static1
Behavioral task
behavioral1
Sample
ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe
Resource
win10v2004-20220901-en
General
-
Target
ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe
-
Size
140KB
-
MD5
d78ba016553c66c5e47275d5ae6ae6c5
-
SHA1
f986fab573749f26efb419309bb9241aac62cdf8
-
SHA256
ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15
-
SHA512
2d33e685579a947aa2f0b239b5a1edc27c116f1fa145fc9a12ba211b77c0e5630b840c4bb8b695c7e4bf3736ab14751cdf568e9d0897385297b18fa4f2197125
-
SSDEEP
3072:v32ts5kLHPgMT9/VAG/qZ4jiIrhRHKcucchFwyzTK:vGq2jLT9/24Xic8z
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 536 1352 WerFault.exe ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe"C:\Users\Admin\AppData\Local\Temp\ffb9b0085f81c9430338f2453ad9e6ce5bc9a57245cae6e0555599da34578f15.exe"1⤵PID:1352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1352 -s 5002⤵
- Program crash
PID:536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1352 -ip 13521⤵PID:2468
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1352-132-0x0000000000400000-0x0000000000424000-memory.dmpFilesize
144KB