Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 09:08
Static task
static1
Behavioral task
behavioral1
Sample
9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe
Resource
win10v2004-20220901-en
General
-
Target
9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe
-
Size
317KB
-
MD5
d6420a09105a7710ecc9fa48056e5cca
-
SHA1
0e812be0cd6f61fe7d537c4ea6349d3a8c46fc68
-
SHA256
9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18
-
SHA512
513e527c5e551a4a0884e40728b5bc9088c0439e0e46e07a814b59713e0f319b79c049ef07b7a3018fc8a89be7b0521ffa8dba28b9f72ef75e809502260696cb
-
SSDEEP
6144:1dNpIzfyQK2dNFOBLzxOdvjkDA+v0yj0GiecOjtCNE8btSAhB6uLTNEsCGc:1dNItnQBIvjkDA+v94LeTjtiR7hdLhEP
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4480 5072 WerFault.exe 9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe"C:\Users\Admin\AppData\Local\Temp\9295c4fdf9f7a9927d5f890403e190b740a472992d3777954d1f3025e1393f18.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 5202⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 5072 -ip 50721⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/5072-132-0x0000000000530000-0x0000000000581000-memory.dmpFilesize
324KB
-
memory/5072-133-0x0000000000530000-0x0000000000581000-memory.dmpFilesize
324KB
-
memory/5072-134-0x00000000006E0000-0x0000000000806000-memory.dmpFilesize
1.1MB
-
memory/5072-135-0x00000000006E0000-0x0000000000806000-memory.dmpFilesize
1.1MB