Analysis
-
max time kernel
112s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 23:06
Static task
static1
Behavioral task
behavioral1
Sample
28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe
Resource
win10v2004-20220901-en
General
-
Target
28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe
-
Size
384KB
-
MD5
f48d7bfbe7efdd271772da9e6b3bb159
-
SHA1
9c8768a2b69c991096a64f54a5472b12b0ca19fc
-
SHA256
28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd
-
SHA512
6b060e4abc27c5be821f919167d0f409a228f3939d138d7d51fc9d6c050bc8173651c1d92ffeb49628b63dde407e051fe51afdd16927e136aee3f75a1c2ee018
-
SSDEEP
6144:LdcOw8EDvHeW55VLI/aDSABTMsFTMQh1tqbV/vA+Hghnns390EhvULzEgPUn/Z:5uLX1LD9BTfFTllqbt4+AdSKv/Pk
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3996 5080 WerFault.exe 28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe"C:\Users\Admin\AppData\Local\Temp\28f6adfb989c1450f7e836b279728481ea0e50aa37d2b6f821b509a2e52d21bd.exe"1⤵PID:5080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5080 -s 7082⤵
- Program crash
PID:3996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 5080 -ip 50801⤵PID:1412