Analysis
-
max time kernel
168s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 07:24
Static task
static1
Behavioral task
behavioral1
Sample
cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe
Resource
win10v2004-20220812-en
General
-
Target
cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe
-
Size
223KB
-
MD5
81e837fac6aad1e5727952c902d60f3c
-
SHA1
34c549ffe0d6343f753bf3314c55b73d7fae9a48
-
SHA256
cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0
-
SHA512
adfe361d0733f9d7216528a5bc0f9b596c939c39181b3863e1c1e8be6a7e692511ac958692d2fa18cbdaf961d22e6ff61781671f0bf1705c29006571eddfb7c7
-
SSDEEP
3072:PEkhpNIl7aPnSQjClECQezlfsKuKY7Iwxpwvo3P9yTVpqdOPJ+F6Q3PU:dKePS7lssO7svWocKaVc
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 792 4824 WerFault.exe cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe"C:\Users\Admin\AppData\Local\Temp\cf1d1a14b9aba2ea68ab67100d5438bb41eb9bc33e527d211fb2b815ac0cf9b0.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4824 -s 5322⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4824 -ip 48241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4824-132-0x0000000000A90000-0x0000000000AA9000-memory.dmpFilesize
100KB