Analysis
-
max time kernel
180s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
26-11-2022 12:44
Static task
static1
Behavioral task
behavioral1
Sample
2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe
Resource
win10v2004-20221111-en
General
-
Target
2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe
-
Size
165KB
-
MD5
20d875ef318f7fe70895b7ca2d8c73fa
-
SHA1
8368173f6edc826b06f72b2fef0818931f49ba5d
-
SHA256
2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762
-
SHA512
bd8632736cb816bd94fefad125138996dc0ae02f066dff3f498762c55be96c652fbcf6763b46f99c212c578275795fb4b675b4aaf138f0e237c5934ac71e375c
-
SSDEEP
3072:KYmlOJseb6jEfMR5kF/71yiMF44WyUtVU1yOXGB8kFF/df2oFfHgWiI+xR:vueOwqfJxU7iFXG/rdf2oRPy
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4216 4328 WerFault.exe 2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe"C:\Users\Admin\AppData\Local\Temp\2593e25ff0b8df13067071ca27532c46e9de52cadb3b0159a8879f68d2d12762.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4328 -s 5242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4328 -ip 43281⤵