Analysis
-
max time kernel
127s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
24-08-2023 01:45
Static task
static1
Behavioral task
behavioral1
Sample
57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3.exe
Resource
win10v2004-20230703-en
General
-
Target
57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3.exe
-
Size
1.2MB
-
MD5
85e7ba83121f4c6b55ad3447596d97cc
-
SHA1
43ec44b701bbec540abdb4f01d8a9311053f952c
-
SHA256
57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3
-
SHA512
8c4943f860166c64cb447cbc745cec9e23ea72aab75e89610a7da369a6adece39ac1fbd653603039a05d155610ca073202d944b6bda8b7e9ed6c90d32c25bbc0
-
SSDEEP
12288:hzC1F/meN7YOxHf9JhqeKnq/sqn6pXTsKjt2V9J:VC1FmK7YOlfwhnKs+6pXTnp2V9
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4660 960 WerFault.exe 82 2252 960 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3.exe"C:\Users\Admin\AppData\Local\Temp\57ef91e4e7fb3b36bab175ab2841af15bdab50313141e39f23b7a5f8169908f3.exe"1⤵PID:960
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 960 -s 6042⤵
- Program crash
PID:4660
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 960 -s 6122⤵
- Program crash
PID:2252
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 960 -ip 9601⤵PID:3944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 960 -ip 9601⤵PID:764