Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2023, 00:03
Static task
static1
Behavioral task
behavioral1
Sample
ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe
Resource
win10v2004-20230703-en
General
-
Target
ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe
-
Size
1.2MB
-
MD5
ad25aad6debda8adce397f161309a5be
-
SHA1
f163544c66a1f37ff2bebd3cc532fb6f97413c96
-
SHA256
ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1
-
SHA512
0683c470607b364af2cef82f46f7e70e670918100f2ac248722c41fff54f94b5371d07f0244dd8091b1b92e41a81a369873f9d3feaf2f250b5cc3983fa3a51ba
-
SSDEEP
12288:TIzIM4/h0cRjG/kvMTheu8WDY3HlHgUoSPL/W/ZlW+V1jrpduBgVXceR5+n1pwGO:TX/h0cEnh8WD8lHvWjW+DXpArdPM9
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4896 2680 WerFault.exe 80 3532 2680 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe"C:\Users\Admin\AppData\Local\Temp\ceff6562454eea82fd35f2d83bf92c8e98a615bdaca6f9244215c1d918d186b1.exe"1⤵PID:2680
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 4522⤵
- Program crash
PID:4896
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 4962⤵
- Program crash
PID:3532
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 2680 -ip 26801⤵PID:4552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 2680 -ip 26801⤵PID:1720