Analysis
-
max time kernel
182s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
01-12-2022 10:48
Static task
static1
Behavioral task
behavioral1
Sample
3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7.exe
Resource
win10v2004-20221111-en
General
-
Target
3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7.exe
-
Size
219KB
-
MD5
f723e2dbd15f6a79fa1697bb08e39c80
-
SHA1
a3b738b50e1bf199ea2bb80d9bbe79b9e6df7bc1
-
SHA256
3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7
-
SHA512
9db8956228724b22afe5863ed6c843fe32ea54a8bc10912931508a777b075c72b055a8297c2b5e19b1e9156002772ca8e1fada9785a2c2dd7130b2b48ca1eb99
-
SSDEEP
3072:oiVZBM1JrvMALni0db/WJIV133rYIjTKEJV/R6xEjWswRdpK:oiV3M7tO0BWuVHj2EItHp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5108 1196 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7.exe"C:\Users\Admin\AppData\Local\Temp\3aed9aa9f38d353c9f18872f45b0eefc56f0a72cfde0db9d221da13e3e743fc7.exe"1⤵PID:1196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1196 -s 4402⤵
- Program crash
PID:5108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1196 -ip 11961⤵PID:3924