Analysis
-
max time kernel
163s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 08:32
Static task
static1
Behavioral task
behavioral1
Sample
624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4.exe
Resource
win10v2004-20221111-en
General
-
Target
624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4.exe
-
Size
344KB
-
MD5
6f92ab139123e273ba83a8d3626eeeec
-
SHA1
9edc4d5abb082bf18038d296d8b48fc3bdffdeb2
-
SHA256
624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4
-
SHA512
d83c28927b84e381260231ec1e02c64a32b1edd1a5d6b0174d12805c1856a31ecaa478f0218d7d564eb2b0e8df0b5ed7f746a81bdeb8c41efa1dcae9d8b53175
-
SSDEEP
6144:V3zAZMO0+ABsQB+TEOHgxTwoPO+boMfn+MohSQLfn7SaXmEGYq:00pQZA6oPO+7v+MOSQLfnTW7Yq
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1332 3052 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4.exe"C:\Users\Admin\AppData\Local\Temp\624e356ff519fb1694c9a6dd5146ba4ce48f6b3c6874b120a000e415c30a61d4.exe"1⤵PID:3052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3052 -s 2522⤵
- Program crash
PID:1332
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3052 -ip 30521⤵PID:3924