Analysis
-
max time kernel
59s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28-11-2022 12:53
Static task
static1
Behavioral task
behavioral1
Sample
364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe
Resource
win10v2004-20220812-en
General
-
Target
364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe
-
Size
221KB
-
MD5
611e0560188969634971c89761f8d370
-
SHA1
26daccae5bcf07a1bceb4587081bc8e550a61e31
-
SHA256
364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0
-
SHA512
ff6b25e78b9974872a72725713d015d213ba9b54857e357007583e16f64f14ea6123b38ca3f93c19f8c9b2313799db19e31c9a8d1a23b8b20d97631d18fc4f32
-
SSDEEP
3072:sEgxtQz3eD0QS4XMQD0Kn2+aBs9Q2XHxbaIZgsBrDX5g5IAYDk3CARujqXUdlxGr:vTlM0JsK2XJnZgkrxDk3kGk2AOv7
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1044 1532 WerFault.exe 364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe"C:\Users\Admin\AppData\Local\Temp\364bfebaddfec28d91be5cc4b581d70f4c3eef54d762d9c0334c8369be1434b0.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1532 -s 2882⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1532 -ip 15321⤵