Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2023, 23:33
Static task
static1
Behavioral task
behavioral1
Sample
8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247.exe
Resource
win10v2004-20230831-en
General
-
Target
8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247.exe
-
Size
6KB
-
MD5
037fe988908399f25068dfcaf30374f9
-
SHA1
ea2b35186c4a917d52581e04a49c2fe34691468b
-
SHA256
8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247
-
SHA512
3cc37a53f0791be52b647c665e255014094b8f5e485c8a6a3a344c9cdcb838bd5dbab1214fcdf4febd2f294a88499f1b2d7240e6f787da01e87f331a8915b589
-
SSDEEP
48:Skbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uyO:d0mIGnFc/38+N4ZHJWSY9FI5WqLx
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1612 4800 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247.exe"C:\Users\Admin\AppData\Local\Temp\8e9f9944ad032725bb80105309aee39f8cd7f2258bfb4ca2b12f70a9aee13247.exe"1⤵PID:4800
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4800 -s 1522⤵
- Program crash
PID:1612
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 4800 -ip 48001⤵PID:1368