Analysis
-
max time kernel
140s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 00:33
Static task
static1
Behavioral task
behavioral1
Sample
e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85.exe
Resource
win10v2004-20220812-en
General
-
Target
e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85.exe
-
Size
367KB
-
MD5
c3320a9dfa26406ed0cd8138676620ea
-
SHA1
00f971954967fdfed57c6bf47683be5ce7e48811
-
SHA256
e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85
-
SHA512
9e2fee69d09b036d933cd2666de34fd776e0f919cc82689ef692251a26fb0661e172138b1f71b266b4f5e92441237502a0aeb782c387d92c75e6294339f32f6c
-
SSDEEP
6144:KuiJARMVfhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:xjRMfrpDneFNzino7IUHybPzQjUeX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5064 2204 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85.exe"C:\Users\Admin\AppData\Local\Temp\e183d7b21c74e8a200b373a5a442282f39eeff0dc390a2c543de642dab0d0d85.exe"1⤵PID:2204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 2962⤵
- Program crash
PID:5064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2204 -ip 22041⤵PID:4656