Analysis
-
max time kernel
191s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01/12/2022, 07:59
Static task
static1
Behavioral task
behavioral1
Sample
d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe
Resource
win10v2004-20221111-en
General
-
Target
d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe
-
Size
28KB
-
MD5
7a374ee7d5e6f0e37d58bd4bc6afa5d3
-
SHA1
2956a685af27ffb5f861ef0b6b13c2d0b2730dee
-
SHA256
d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03
-
SHA512
0a6150993130961554bba81937748a405996fbc1133f7de25ce6395de76a46b70d711dd423f43100765a9e5ce3143d6ca5de6a152c54fb73b60de33435bcb055
-
SSDEEP
192:aZiZkraWm4BQV5NNl4gKOt+poHVlXA7GPwFV5OzWq0u0Go21Y0r1hXu9Xq8NK0ox:aZAIeVLJKEuCwX5OzZ0u0VB03XupqkG
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4820 2600 WerFault.exe 81 3852 2600 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe"C:\Users\Admin\AppData\Local\Temp\d3207acfb7743aa39bafe8d6f4459d25616e4137007098dc5c999fb6e92bcd03.exe"1⤵PID:2600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2600 -s 2562⤵
- Program crash
PID:4820
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2600 -s 2522⤵
- Program crash
PID:3852
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 2600 -ip 26001⤵PID:664
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2600 -ip 26001⤵PID:3448