Analysis
-
max time kernel
172s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27/11/2022, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60.exe
Resource
win10v2004-20221111-en
General
-
Target
2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60.exe
-
Size
252KB
-
MD5
afb529797672b45c3fe303274888df1c
-
SHA1
b79af705b8974fa81c1064e7b10ba14b49a78a98
-
SHA256
2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60
-
SHA512
6334a7c65e08ee0928e00ed3869521ebc5adf9b42db34933e42706ce697b730dcf51fb4c55dce4fdb8e9e5c223ddd69bf99ace407cd9de7a6b72468b5b27bb84
-
SSDEEP
6144:LIQsbun/1o3F3eZZJDZfgPOmCTC+bgC93joA6bp/:L0bun/W34ZZJ1cjCT3bgO16b
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1700 3104 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60.exe"C:\Users\Admin\AppData\Local\Temp\2233473c471e4ccb8775b117302d11bd1cbd50e7e6e53f430f4f94e31a0e2b60.exe"1⤵PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3104 -s 4242⤵
- Program crash
PID:1700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3104 -ip 31041⤵PID:2148