Analysis
- max time kernel
305s - max time network
317s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
05/12/2022, 17:09
Static task
static1
Behavioral task
behavioral1
Sample
4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3.exe
Resource
win7-20220812-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target 4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3.exe
- Size 20KB
- Sample221205-vpfe3ahf65
- SHA256 4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3
- MD5 75652a3767925a534fc176bd128271da
- SHA1 3a57148a2b16c0d4c2df88377b9ad18fbabb616a
- SHA512 fa48da319f09bef567c141fecbdca4d6320a31e38cac17707e30939f0779df40884d006e2d3bd687652fa6de0e4add4c5ee832addb71643d7647dc3135775721
- SSDEEP 96:Dz6NW7ZpJQ60Kyt56gY2UJggQOfeNmJk:v6NCpK2yvY2UJsIeg
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4220 3608 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3.exe"C:\Users\Admin\AppData\Local\Temp\4497421aaafe4fe8c09336f8d73c6d32412d4882020f6ab3c50a7570ca34b3c3.exe"1⤵PID:3608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3608 -s 2522⤵
- Program crash
PID:4220
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3608 -ip 36081⤵PID:3440
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3608 -ip 36081⤵PID:3020