Analysis
-
max time kernel
188s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 05:50
Static task
static1
Behavioral task
behavioral1
Sample
b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe
Resource
win10v2004-20221111-en
General
-
Target
b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe
-
Size
305KB
-
MD5
b19031e17bc0fbe1b2d2c0169afc3c98
-
SHA1
7d9f905adde04ee646eb54c2e791108ed707ebed
-
SHA256
b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358
-
SHA512
6d64402e6a7b589cbcd685973199fcb970c73a8b031a12260da22398bad20d813ae573c33ca6c19db87fe6346c48cbcb84b6062c52be0838185b439a6918aff4
-
SSDEEP
3072:v5Gqpg+TLvyAGu+drHkCsy4Ag0Fu1YbtHkJLe8OBtlAL/r+AgPqdALKMVR3k+Ak6:v11XCs7AO65KXdqKKR5Y7H5PPu
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 744 4412 WerFault.exe b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe"C:\Users\Admin\AppData\Local\Temp\b0c4858c1b34dcf6a851842bfda111338c195b0fe70342a62518320cada5a358.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4412 -s 3802⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 196 -p 4412 -ip 44121⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4412-132-0x0000000002340000-0x0000000002356000-memory.dmpFilesize
88KB