Analysis
-
max time kernel
98s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
02-11-2023 19:46
Static task
static1
Behavioral task
behavioral1
Sample
554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe
Resource
win10v2004-20231023-en
General
-
Target
554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe
-
Size
375KB
-
MD5
fd36e16bd6a199b8289a7bdfd45de021
-
SHA1
02a6ededf69d3d4dcce52b4c1261c2a9b15cba3c
-
SHA256
554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875
-
SHA512
c2d4768de725b098dd78443de6c8f350bf366fc1c8813bce6cebf8773cd54cd470680a7b8c3399735f2ec52a71b5ab97da9e5253298ec428f07e7d6effffdc16
-
SSDEEP
6144:qaq8vzvMEQ2MQEObF6CX6pQFeE6dtRtWvOMo9g4lSpzceUD4bVZ3PSNb2b0jexOO:qaqmzvMEQ2MQEObF6CX6pQFeE6dv2AIH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1372 4248 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe"C:\Users\Admin\AppData\Local\Temp\554489fe5d2e1e0ea325d54a6e5ed1042b178b601217b584535aa5b30e474875.exe"1⤵PID:4248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4248 -s 8882⤵
- Program crash
PID:1372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 4248 -ip 42481⤵PID:4804