Analysis
-
max time kernel
358s -
max time network
408s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03/12/2022, 13:39
Static task
static1
Behavioral task
behavioral1
Sample
f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2.exe
Resource
win10v2004-20221111-en
General
-
Target
f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2.exe
-
Size
261KB
-
MD5
0ba1fba38851e0cea56e233bf6e58d08
-
SHA1
85cac8d34191999b0292e5207cf73c42fbf14de6
-
SHA256
f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2
-
SHA512
66d0033d8f3401efe5f3b2aa834298733a734df81283d0a8416ab4f02cff2ee728136ad67cc75160d513ea6467ef2f206a42634eaf3416bfa0a818bfa3579d47
-
SSDEEP
6144:sb0urEG5Zj4U2X3VppkYr3rA83UmhMklHx7BpFemy472ToRDL4KI:nurZUX39gAnTVP/0ToRDU1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4604 4564 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2.exe"C:\Users\Admin\AppData\Local\Temp\f3b733b85d4723fb32f120e825ec71c33823d0627734006bada002fcc4bdd8f2.exe"1⤵PID:4564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4564 -s 5362⤵
- Program crash
PID:4604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4564 -ip 45641⤵PID:3184