Analysis
-
max time kernel
91s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2023 09:56
Static task
static1
Behavioral task
behavioral1
Sample
b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe
Resource
win10v2004-20220901-en
General
-
Target
b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe
-
Size
1.0MB
-
MD5
2a7463a6a8c0d8070bba46d64d7bf510
-
SHA1
42ca122e7cd13cfc9b92ac21bdaceb2bd907472a
-
SHA256
b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69
-
SHA512
e033750b7308cd084946ad842eba236d95b6c485958e82490d1a71ea164a605f6c57f001f8992daf2fe9f2286b8661599d8962b6c681ff76577729d754c034f5
-
SSDEEP
12288:TdBxXYib/OGpEhmnH5rfC3oVMM8rUG2fSOfF9TH8JqxpwKcIQUdZ9xxVPC:JXXYib/+4JfCoorU17ffTHEqHwzrUzfC
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4828 4032 WerFault.exe b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe"C:\Users\Admin\AppData\Local\Temp\b31b0e51438a2c2b501ad090edd78ad17a914d310843c551ce2a80d8a6297f69.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4032 -s 3802⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4032 -ip 40321⤵