Analysis
-
max time kernel
135s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
03-04-2023 17:25
Static task
static1
Behavioral task
behavioral1
Sample
03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe
Resource
win10v2004-20230220-en
General
-
Target
03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe
-
Size
541KB
-
MD5
9bd6b1f24b9589a3fbc1d54b6e6184b8
-
SHA1
f8473c6c8b298a3d72c8ca890667eddab62d2ba8
-
SHA256
03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572
-
SHA512
58627332bb35727871984b1763eac64c7156414a29d81b090c6475c13b8d7d009828ba4240e581ab94c6b0908b12194b6489c9469bc1ad3151eda256c86e5607
-
SSDEEP
12288:r44xG36A38gfmYzEMbvYYU7CrJdJWTd4pb:3xG36nkEqyydYTd4p
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3680 4416 WerFault.exe 03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe"C:\Users\Admin\AppData\Local\Temp\03a9d6afc99e70333723d921bd1265ac948cdabb8b15689b5ceb1c02365a9572.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4416 -s 2242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4416 -ip 44161⤵