Analysis
-
max time kernel
184s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:38
Static task
static1
Behavioral task
behavioral1
Sample
1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe
Resource
win10v2004-20220812-en
General
-
Target
1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe
-
Size
280KB
-
MD5
6d1d4e9246706e61ba445ba1f86ae6ed
-
SHA1
fc4cd5f3132d85904dc57d73e06bb7ee03124470
-
SHA256
1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c
-
SHA512
decb449e7ec99f724af7949df350f16634215f7159517988087474c0bcf96f921dfb0cd46259fe6d72aa3ec08ebe749dbaecb1436540baa3bcd4cab9342643fe
-
SSDEEP
3072:pLj8i4oI1cY7awq2bUb0wwgem7g/KTWcOf2sw566+xzQlukoN7dGVmJXmMqBoS8n:p14oGcyawq2bThFmmK/5FkzQlukRD8
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4928 4616 WerFault.exe 1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe"C:\Users\Admin\AppData\Local\Temp\1335077f95d9d44ea5d69925e45bf9a3c53a0af3a8f389f0ea82a1a5a4a4899c.exe"1⤵PID:4616
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4616 -s 5282⤵
- Program crash
PID:4928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4616 -ip 46161⤵PID:1812