Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 05:30
Static task
static1
Behavioral task
behavioral1
Sample
3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab.exe
Resource
win10v2004-20220812-en
General
-
Target
3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab.exe
-
Size
396KB
-
MD5
178d3c0267206616885ae112816e4167
-
SHA1
d58b74fabedf75ff2b6e9805d3fb3c71476b723a
-
SHA256
3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab
-
SHA512
7c4c012ae2fec51536358fb92d2cdf35a6f422488b2eaabda0b85baf942b6f41dc1aee390b3f1e21b5b49aaf19de02fe22252a47312445bb716a8aaec4f4609e
-
SSDEEP
6144:zBF5mzC+OJi/7izusmu6o0prKHZ7BM73/O8vPcJTB5QTxfvG/BKr:zBp+OJiYusb6zwW7PO6Pcb5InGkr
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1648 4760 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab.exe"C:\Users\Admin\AppData\Local\Temp\3ee4da3f642eff1266a7b424fb755979e8976e4238d8f55e0a95499f026b30ab.exe"1⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 5722⤵
- Program crash
PID:1648
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4760 -ip 47601⤵PID:3668