Analysis
-
max time kernel
170s -
max time network
175s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 03:26
Static task
static1
Behavioral task
behavioral1
Sample
39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe
Resource
win10v2004-20220812-en
General
-
Target
39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe
-
Size
521KB
-
MD5
7cb98d81b11bb3f5ca2062de6d6eb354
-
SHA1
efafc692fbfcaf8b8c089909adb9803b5f2c4be9
-
SHA256
39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37
-
SHA512
3722b2ee994ea07462e5fe84a34ba770e2aebbe00c573150625a9c366778890e93bfbc77bb7410dd93009fab9ce504818a228bf08b2ecc6cc28cd7d38a7a6b4a
-
SSDEEP
12288:jty9urkjHwIoTtejyDRIYj1OpwlRVWWR64SB1H8zvf7GfdX4I:1sHwhsa2sRVWWR64A6zyfd
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 3360 3120 WerFault.exe 39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe 1480 3120 WerFault.exe 39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe"C:\Users\Admin\AppData\Local\Temp\39e1003cb79b5370fdda9b35c222f066b0cc32ffaa74d335f630b9cbd2b80b37.exe"1⤵PID:3120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3120 -s 5282⤵
- Program crash
PID:3360 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3120 -s 5522⤵
- Program crash
PID:1480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3120 -ip 31201⤵PID:4644
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3120 -ip 31201⤵PID:532
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3120-132-0x0000000000653000-0x00000000006BF000-memory.dmpFilesize
432KB
-
memory/3120-133-0x0000000000607000-0x0000000000616000-memory.dmpFilesize
60KB
-
memory/3120-134-0x000000000064B000-0x0000000000654000-memory.dmpFilesize
36KB
-
memory/3120-135-0x0000000000653000-0x00000000006BF000-memory.dmpFilesize
432KB