Analysis
-
max time kernel
153s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 04:26
Static task
static1
Behavioral task
behavioral1
Sample
e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe
Resource
win10v2004-20221111-en
General
-
Target
e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe
-
Size
773KB
-
MD5
48fc525c80aea2a073b4e16f4a98646b
-
SHA1
aac1555af284530a0072a0a4caa8e55231f35427
-
SHA256
e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c
-
SHA512
8baecb449ecb48431cd5cfaf4d3b5b22b4e4f13e4b0d98fef74fa8e3149c6c737214c23b21ff69290ac5bdc90f0905e221c9fe43d32b3cf378e057e807c8bd71
-
SSDEEP
24576:DI0sDNiUfiPgI91k4geYZF2HSoHvwA6PfRAcOsA0:Dq5iUU5nSeYiHSoH94fK0
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4828 4444 WerFault.exe e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe"C:\Users\Admin\AppData\Local\Temp\e58768c3df867270aa9e3177709415005914b39d272623e8d296106ad5cf125c.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4444 -s 3882⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4444 -ip 44441⤵