Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
28/12/2022, 11:15
Static task
static1
Behavioral task
behavioral1
Sample
4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d.exe
Resource
win10v2004-20220812-en
General
-
Target
4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d.exe
-
Size
8KB
-
MD5
9731995124936675618d5412a70913ef
-
SHA1
3e5b23b0a16a0e9eaeb91c0286007fbdaf2651a0
-
SHA256
4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d
-
SHA512
70fe3aa4a66e21b579a59d9fd95e9b7f023bd024900b56d1fba857b37c72e477c932a49eaadd8c5b5e7a93c66eaf8a8578ce72257f0035cfbfd404ed23dcac71
-
SSDEEP
192:E2/wEpFj++wsMICux8/+7B+HcJ4VcJ4iNvoyn0H74x+on:E2/P/KICL+TOyOil6H7m
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1668 3364 WerFault.exe 66
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d.exe"C:\Users\Admin\AppData\Local\Temp\4c03a9f7761460c6e81c82502b9524b48062180932e13cb3ec6afa3b972bc84d.exe"1⤵PID:3364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3364 -s 5202⤵
- Program crash
PID:1668
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3364 -ip 33641⤵PID:4236