Analysis
-
max time kernel
152s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
02-12-2022 02:08
Static task
static1
Behavioral task
behavioral1
Sample
dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe
Resource
win10v2004-20221111-en
General
-
Target
dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe
-
Size
32KB
-
MD5
62453c10ee7a6a83af22fe35d98371f5
-
SHA1
eef16c96818898b8456a8a7cbe287f69c638a526
-
SHA256
dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558
-
SHA512
faa909dda7c340489f3c6a044fd2d623b0d537eb406c5c0861cd6118fe500d2df8133681a1d32d8e2b4368fe6f33fced9e81dc21fd3a514c024d6fc1b309ff17
-
SSDEEP
768:E/qF/LKI6oh244vibXEhOKEuLqbEO7fsO+cRv39gP8gwQKZEyuKk9jR9O:EqDKIB244KbEhOKEuLy7szc3q8fQYFiO
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2944 2972 WerFault.exe 83 3760 2972 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe"C:\Users\Admin\AppData\Local\Temp\dd3fde3469ce9281a2e0fa2ac6dbb00e4a6049f3e0157d25c4193bd5b86d1558.exe"1⤵PID:2972
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 2522⤵
- Program crash
PID:2944
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 2642⤵
- Program crash
PID:3760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2972 -ip 29721⤵PID:1228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2972 -ip 29721⤵PID:3764