Analysis
-
max time kernel
138s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
30-08-2023 09:08
Static task
static1
Behavioral task
behavioral1
Sample
c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238.exe
Resource
win10v2004-20230703-en
General
-
Target
c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238.exe
-
Size
5KB
-
MD5
865fd373e42262715862d1ce9c3bb5c9
-
SHA1
3433a13b198bee54cafb5cb5c25f6eb7bc0921a6
-
SHA256
c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238
-
SHA512
eff5355be620a8c57d10f1e297a78a12f14a88012439de54bbea6cc3fe788b03e77de2769324137ecb9da63c24fdf5d27d6648afa7ec07f95f7ec46e2d163864
-
SSDEEP
48:SJlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tCRuqSxp:KWLkFfNnOKYloIQ2pm2pbYSWxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1968 3500 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238.exe"C:\Users\Admin\AppData\Local\Temp\c128a1c267eeba08fcf0ee6ea5c939f624b2d28c20a4f8f1050a8fd33cece238.exe"1⤵PID:3500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3500 -s 2242⤵
- Program crash
PID:1968
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3500 -ip 35001⤵PID:2060