Analysis
-
max time kernel
150s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809.exe
Resource
win10v2004-20220812-en
General
-
Target
c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809.exe
-
Size
346KB
-
MD5
c570c4bce0ee8612d89512748fa42d3a
-
SHA1
c4d8d3b56f3409b773937178d54d0e49a4b63fc6
-
SHA256
c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809
-
SHA512
9bc6f4111c4b08a6aed5a88f3f7209f9ea99ad9e4dc1b1ec43ad7f4f0a30037bb3ca72c05f4687d10c8895e48e668aebee208de3833e3d161ef38d622023ecdc
-
SSDEEP
6144:I7vhd2s1TSEyWrnx8/kezjZqgDiofXf/Y9OKHSzm:82WDx4ZqIi6wOaE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2528 4732 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809.exe"C:\Users\Admin\AppData\Local\Temp\c338053c9efcc6f02bcbd95ce831c6b614109254cf6ca7ed22439a3eaefe2809.exe"1⤵PID:4732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 4522⤵
- Program crash
PID:2528
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4732 -ip 47321⤵PID:4596