Analysis
-
max time kernel
123s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 07:35
Static task
static1
Behavioral task
behavioral1
Sample
f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe
Resource
win10v2004-20220812-en
General
-
Target
f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe
-
Size
312KB
-
MD5
bf134ff050297f1c12e299b0528bda5c
-
SHA1
01a802d55af6aecad5f1f0ac5a71b0b649623107
-
SHA256
f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd
-
SHA512
733afc88a4e9cc4d1568f6097f7d370dae90f367febe8619c7fd5adedb7c64145a9f506c51ab3dbaa31ceec0a12466249d4b14b2bb7d201657ebc3417545e98d
-
SSDEEP
6144:idzYQ/pIIb+hxjjMb7x6/CqGWC4tChXGj:QzYQ/pIIwjjMbd6/vLC
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4972 3144 WerFault.exe f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe"C:\Users\Admin\AppData\Local\Temp\f6dcb1ec2b077351cf9b73713479ef97c179b47df19a0d1153b0367f9b587bdd.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3144 -s 5642⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3144 -ip 31441⤵