Analysis
-
max time kernel
170s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e.exe
Resource
win10v2004-20230915-en
General
-
Target
667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e.exe
-
Size
826KB
-
MD5
ac3b6e59ad7a367f5fa49b331e2dc207
-
SHA1
9f3fad233a4e5612ed16db5f9786f22333c7a3a0
-
SHA256
667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e
-
SHA512
dd53fee4dfd3f9aecb7f36583c83e9677bca0afb955f55728e1dcc2121c30d26777342b5ba691228fe26497f2c3f4ea75e4b3ffcfad8aa8511fc563d0b23299c
-
SSDEEP
12288:GybboHM6c97agSx63W36XnQz65iWDIb99wB+gazZp5+ZTa4wpcVcA+PKC2mhUP:GGbv6w71WKXPUb99eagTa4f2A+WmhUP
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4772 2264 WerFault.exe 85 3844 2264 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e.exe"C:\Users\Admin\AppData\Local\Temp\667484d9a96edb3ee6bbec6fd14f26fb7cf074113c6602fe0177587be4a7d70e.exe"1⤵PID:2264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2264 -s 1842⤵
- Program crash
PID:4772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2264 -s 2122⤵
- Program crash
PID:3844
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2264 -ip 22641⤵PID:4648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 496 -p 2264 -ip 22641⤵PID:5056