Analysis
-
max time kernel
134s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
14-02-2023 04:23
Behavioral task
behavioral1
Sample
24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe
Resource
win10v2004-20220812-en
General
-
Target
24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe
-
Size
5.3MB
-
MD5
e38a52d2eb76816d49c3bb6a6f4f3627
-
SHA1
f98c3645e47f537fcf75feec85d1e599a190c765
-
SHA256
24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900
-
SHA512
ef6c1c1b344e763c408db2151bf722b2d626fae9cc8ec9a1b324ba8be123072b913afc22738e86d5e61816083e2a74842304fe419380d4742db5f75335eed8e0
-
SSDEEP
98304:38YhlXeVL0f9rFAQE9DVC0oDht0xEfJmjTI52J/b40Io2KNEJpH:NuVidFyDVCXDht7fJmjkU/WRR
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3672 4004 WerFault.exe 24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe"C:\Users\Admin\AppData\Local\Temp\24b1fa21288cc62f091e9fc623ccf238e57860d7da7646e3303c0d5fbae94900.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4004 -s 5522⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4004 -ip 40041⤵