Analysis
-
max time kernel
185s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 05:17
Static task
static1
Behavioral task
behavioral1
Sample
92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe
Resource
win10v2004-20221111-en
General
-
Target
92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe
-
Size
108KB
-
MD5
635ed6cf61aa5e72bb8251fae519fd23
-
SHA1
db7a0291bae76d353d57f8af695e0d50782fdde7
-
SHA256
92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e
-
SHA512
01f695988a080733611d27d571490989706804da97b4e1628a5fdc31932d99dc0d81ab630062a1d61f0b816a476acbc49c60327639eeaff3ab08d42a576701ad
-
SSDEEP
3072:WcGdpLFNnpVpEm08RADLG5Y4mNal2jowmI/Q2:DY9/p08RADLG5aal29Q2
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4912 4144 WerFault.exe 81 788 4144 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe"C:\Users\Admin\AppData\Local\Temp\92f43e9ab3a13a9e890b59471f6131038eec8e2889c8e898318124a792595e5e.exe"1⤵PID:4144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 3922⤵
- Program crash
PID:4912
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 3922⤵
- Program crash
PID:788
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4144 -ip 41441⤵PID:228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 552 -p 4144 -ip 41441⤵PID:4436