Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 05:16
Static task
static1
Behavioral task
behavioral1
Sample
93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e.exe
Resource
win10v2004-20220901-en
General
-
Target
93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e.exe
-
Size
48KB
-
MD5
86faea0ae7b27618f6a85591cb781610
-
SHA1
0162764c8a3fde02b88f4fd726bb4c7119d77f0d
-
SHA256
93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e
-
SHA512
5e7850de2594d83164e404cb6969a6b53e6b71f701c2beaf4b13c1e1db446b5406e6c2b99d874af90a718e34acf07bf85c1b5193b7413044c3f7497a018900e2
-
SSDEEP
768:ir1EJb16htG030qM9MtgTVH7NHaurxmWXOQfwoObuPb77eGNGTh:ir1Eut30qKMml5lXAoO+H7tUTh
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4452 5012 WerFault.exe 81 5080 5012 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e.exe"C:\Users\Admin\AppData\Local\Temp\93232bf9af5638e1f7365b329545aced7c488f52512c0740fde6f2f1b9ed544e.exe"1⤵PID:5012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 4082⤵
- Program crash
PID:4452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 4282⤵
- Program crash
PID:5080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5012 -ip 50121⤵PID:652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 5012 -ip 50121⤵PID:524