Analysis
-
max time kernel
270s -
max time network
279s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
27-11-2022 12:57
Static task
static1
Behavioral task
behavioral1
Sample
b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe
Resource
win10v2004-20221111-en
General
-
Target
b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe
-
Size
253KB
-
MD5
6f02982b41e04cbc36fb63774da221ae
-
SHA1
8a011b383e42e6c71800c6fac13b85c00a0e5640
-
SHA256
b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c
-
SHA512
4eee994bd8f28180a2ceeffe939a2f99dbb2c2e70192f7128f83bace85b6c9e78cc048f88be3afeecd2d71f4d7e4eb8ab505df02a65292d43bfcaf00b9f07b52
-
SSDEEP
6144:aLBKpsNzAOR36nd5vr5dRBa0HzM04w4Ad:aNWshD3UXz5dPzM04w4Ad
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1588 1160 WerFault.exe b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe"C:\Users\Admin\AppData\Local\Temp\b477b591e97b9baf766bc3d7c14d0c1e51f604b07c55ab3585c5800830769f5c.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1160 -s 2842⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1160 -ip 11601⤵