Analysis
-
max time kernel
294s -
max time network
444s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2022 10:18
Static task
static1
Behavioral task
behavioral1
Sample
fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76.exe
Resource
win10v2004-20221111-en
General
-
Target
fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76.exe
-
Size
15KB
-
MD5
4168ba4bd44e78042c22d2f252db8307
-
SHA1
8b8d2c25e3bdcb32923ccca8483a8401a91bf24a
-
SHA256
fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76
-
SHA512
b25eed895713fa04e6da373aee1218841706f6768a4307cb84b55ea2e7ea6eea01b4e123f6b631345f0ee978a2be43c0e6f6956c2f785b19584c5fa666d9d025
-
SSDEEP
384:gve728IrKGOuwlozcolMAzolphSEmFfpHuMK0QVA:gKIrKh6QoRM9WtpHlL
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2616 5028 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76.exe"C:\Users\Admin\AppData\Local\Temp\fe37b58d58020e453acf3d0801fcd5d1f025fa7f38fba291e638dc13e6dd1d76.exe"1⤵PID:5028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5028 -s 4482⤵
- Program crash
PID:2616
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 5028 -ip 50281⤵PID:3728