Analysis
-
max time kernel
161s -
max time network
195s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 00:21
Static task
static1
Behavioral task
behavioral1
Sample
1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe
Resource
win10v2004-20221111-en
General
-
Target
1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe
-
Size
547KB
-
MD5
9aa95b27ff879d63f093759239086a50
-
SHA1
889325176e8c14cf31f0d940abcb0c027af5072b
-
SHA256
1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874
-
SHA512
4349e92b874316c8479d006452652e7e755f55116364bcc86f29719a4123f518736d7bb1df9c8a5f09ca9a5ec858974d0b4182710fc442209fc0cfa094e7db74
-
SSDEEP
12288:uQ3gf7q14BqI/jHzh1GRLYT1ZneaqiTALuNGSRWGN62PedWTEOr:5gTq1KqI/zz/GqZnE/uNGyltPeggOr
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 532 2000 WerFault.exe 1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe"C:\Users\Admin\AppData\Local\Temp\1a99acb43ad9cc114b7858ff1b08c228696279b3fc719e42981b233c5dab0874.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2000 -s 4522⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2000 -ip 20001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2000-132-0x0000000002280000-0x00000000022F6000-memory.dmpFilesize
472KB