Analysis
-
max time kernel
189s -
max time network
232s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:38
Static task
static1
Behavioral task
behavioral1
Sample
0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe
Resource
win10v2004-20221111-en
General
-
Target
0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe
-
Size
372KB
-
MD5
7b77c6dc0621b0800489a46adc09e5b1
-
SHA1
b99722d3af73cd81d63f637327a3a334d5b00a3f
-
SHA256
0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c
-
SHA512
e41ed611ae011fbd3ab4ad52a5d42f95404075902d009ff67cdf777e74e906d682b33309ddcb18203e63bdbf92ac6025991e69a5b1d152f2da8068c9c393502d
-
SSDEEP
6144:ww5TpVKDRZV3bEO5L3m2H9qkR5mdPIZ+54:wwZTGRZV3QO5L3m2dqAmdPIg4
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4100 3904 WerFault.exe 0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe"C:\Users\Admin\AppData\Local\Temp\0b50b31ab25682157f58f56159b18d806a3932255e19bc3ab9b5c0db769bf54c.exe"1⤵PID:3904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 5642⤵
- Program crash
PID:4100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3904 -ip 39041⤵PID:3768