Analysis
-
max time kernel
202s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 11:34
Static task
static1
Behavioral task
behavioral1
Sample
cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe
Resource
win10v2004-20221111-en
General
-
Target
cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe
-
Size
194KB
-
MD5
e8c177492ba74f3b148d1570ea64791f
-
SHA1
98f36136d0bb706d278e1c55b32d55da1e9fd545
-
SHA256
cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc
-
SHA512
a6823805b44c8899e68e6621c2544e25e83ae71fca62119c1bffb2b1660b856ff753f1bf7db71072d5e243398c7ab6eac01178659183450896d375b4db60a6b2
-
SSDEEP
3072:WXNHCcK/d57cZ0gucmIBHqI6QHEt9JVVtA3+kM8tfPTY1kzd4blnHl8SMWRxFeGA:z7xguAKXry3jdfPTykp4dl3RH/A
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4564 3424 WerFault.exe cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe"C:\Users\Admin\AppData\Local\Temp\cbd655138d3da558de8b669db11373cc8e81ccb2004a8676ac44de559efe1acc.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3424 -s 2922⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3424 -ip 34241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3424-132-0x0000000000520000-0x0000000000539000-memory.dmpFilesize
100KB