Analysis
-
max time kernel
137s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2023 10:15
Static task
static1
Behavioral task
behavioral1
Sample
43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d.exe
Resource
win10v2004-20220812-en
General
-
Target
43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d.exe
-
Size
84KB
-
MD5
8bf6c5db3043033168bcb15cd21c3a7f
-
SHA1
2d110bbb7950c6fb0d10e39623368ad1362627a9
-
SHA256
43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d
-
SHA512
f9eba813678dbd7ca988e4ad20f854d90846a53266d37d7e824ebac0cb04ab61cd77d0baa0e4d6f92a323fad1b15edb1b6f665fae9809e337fd797a09ac902d0
-
SSDEEP
1536:GBIoK2O+urs1j8ZPJFqUGQX+/ivwSyXgYmdyAQ0JYI5pcbOMisubmfsrXX:x2O+ursl2GU2/ivwSyXMdyAQ0JY6eOLH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2228 3464 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d.exe"C:\Users\Admin\AppData\Local\Temp\43e5afdd6fb4799d36f5370de8db37777ce0e7e0c19857abcb5bae7e5eb52d7d.exe"1⤵PID:3464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3464 -s 2442⤵
- Program crash
PID:2228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3464 -ip 34641⤵PID:1668