Analysis
-
max time kernel
150s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
29/11/2022, 10:03
Static task
static1
Behavioral task
behavioral1
Sample
2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d.exe
-
Size
44KB
-
MD5
19f44120be8e248b44f0d03dd0893a20
-
SHA1
c9eb36405c9b53029455e6ee0c03179f3d344d09
-
SHA256
2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d
-
SHA512
e3ab3d4fd54b2bb5ad5a1ec8e774c16c01f51bd2ee9fdc1b3adc6948128a8cf5e9f79459947a0b0e3ee4eee4aee8d8b0981386ee186fc8c483a9e737ae857d31
-
SSDEEP
768:/sk0x7FOqOwcY+aHv6tAiaruMbhRhDR2:J0xZONGDruMbhRhD
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2708 1076 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d.exe"C:\Users\Admin\AppData\Local\Temp\2f49bddade975935c84a3017da9282b6c732856ea63a8a1f8979014f78bb273d.exe"1⤵PID:1076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1076 -s 1922⤵
- Program crash
PID:2708
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 1076 -ip 10761⤵PID:1588