Analysis
-
max time kernel
144s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
29-11-2022 16:47
Static task
static1
Behavioral task
behavioral1
Sample
7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983.exe
Resource
win10v2004-20220812-en
General
-
Target
7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983.exe
-
Size
107KB
-
MD5
43967ed6170bbb913305d6f9617ae12d
-
SHA1
3487480773d892435174bbbf07abe24dcac83565
-
SHA256
7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983
-
SHA512
826dde99489ca4cc7edff78e65102f485ac5dc9773d057648b2d227cdb1c20edd083445aafce24c8bd10705cd2c7a053e22f3fd353b9fd8d2340b4ff6bc90791
-
SSDEEP
1536:evswMYx51srWTbVZHrZ2sKo67MT2X9hYDFe8pRt2jEXK:evTMY1sI/LZZKo67WU9oFFi
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2728 4960 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983.exe"C:\Users\Admin\AppData\Local\Temp\7841bb9dba5a3ffd8f69fa85cd3661bffaaddd1868533ce9a60f8a4e9b60a983.exe"1⤵PID:4960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4960 -s 3562⤵
- Program crash
PID:2728
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4960 -ip 49601⤵PID:4744