Analysis
-
max time kernel
252s -
max time network
297s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 11:31
Static task
static1
Behavioral task
behavioral1
Sample
ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287.exe
Resource
win10v2004-20221111-en
General
-
Target
ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287.exe
-
Size
767KB
-
MD5
4bc39f8ffc7af554dc8f2814052b09a4
-
SHA1
8dfb1430eb22ab45bbb9a22c52d3648f83f66f33
-
SHA256
ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287
-
SHA512
7caca4b48916b9245419795387f383ee6269491691f9f66fbf7d6cec14fcaec7051ea804abf50b49d72690be8401d32b548e126b09696fa35ddb42a5a12958e8
-
SSDEEP
12288:CZL+i65M3z9qg1kujI63sIHsjMdkNRhiDp+nd9ID5tAfUQcN9KZW3jUC:C5jRtVIz3Mqhqp+dQ4cKZWz
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1548-132-0x0000000000400000-0x0000000000617000-memory.dmp upx behavioral2/memory/1548-134-0x0000000000400000-0x0000000000617000-memory.dmp upx behavioral2/memory/1548-135-0x0000000000400000-0x0000000000617000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 3096 1548 WerFault.exe 59
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287.exe"C:\Users\Admin\AppData\Local\Temp\ee233be027a63cd8ea911517393134a5d5da492289059fbec3c12d1696bf3287.exe"1⤵PID:1548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 5682⤵
- Program crash
PID:3096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1548 -ip 15481⤵PID:3796