Analysis
-
max time kernel
199s -
max time network
219s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 04:58
Static task
static1
Behavioral task
behavioral1
Sample
ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe
Resource
win10v2004-20221111-en
General
-
Target
ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe
-
Size
2.2MB
-
MD5
2143e3f661a12e987a590a19c62e80e5
-
SHA1
178ac441bec96294ed7afcb6c11f6ba3e3143a75
-
SHA256
ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162
-
SHA512
b029cf8f8c146f4f4a29cb0204f60e659a200b4589cde0842fd4b456e364ea4bc6e4c555e74c92341fdb52f9529bfb54858f6104ede4796373d5883e5e1a8fb7
-
SSDEEP
49152:MHNRaJsiPfkOal/74cs4CAkVAh3KLHeNjEWuRxaa995XzIGbn:MmJsmCNvYf+NjER0a95XzLn
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3228 624 WerFault.exe ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe"C:\Users\Admin\AppData\Local\Temp\ca73c1e272f0634901c4bd5f0ff8942f44739eca23b653d02bae3dd87819b162.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 624 -s 2802⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 624 -ip 6241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/624-132-0x00000000024E0000-0x00000000025C5000-memory.dmpFilesize
916KB