Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28-08-2023 00:00
Static task
static1
Behavioral task
behavioral1
Sample
d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d.exe
Resource
win10v2004-20230703-en
General
-
Target
d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d.exe
-
Size
964KB
-
MD5
77ec6588655a16a9fe524edb90d10758
-
SHA1
878e4cd7fa0e5dfdc3d8310b77f4d1763f991a61
-
SHA256
d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d
-
SHA512
41881149b743f41f83333023415c4c98fb70f147cf461b4bb12ab1135027ee9a04ecf061adc6e8808bf20b59bab34dab3ab48137b2607be71a17245d56b6990d
-
SSDEEP
6144:f4XtR7Mr2N5Og12D5RiWfghZarn2cNVUufkihMHVeG9QgVLOSv5fE6xZqI7yY5NP:faR7Z5OgImU
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3900 1368 WerFault.exe 80 4540 1368 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d.exe"C:\Users\Admin\AppData\Local\Temp\d7355e36bd4bc4649f46461de104c113a8e1efa41047c9c6d63cf33fb797be2d.exe"1⤵PID:1368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1368 -s 3922⤵
- Program crash
PID:3900
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1368 -s 4322⤵
- Program crash
PID:4540
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1368 -ip 13681⤵PID:1436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 1368 -ip 13681⤵PID:4976