Analysis
-
max time kernel
135s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2023 01:20
Static task
static1
Behavioral task
behavioral1
Sample
2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197.exe
Resource
win10v2004-20230915-en
General
-
Target
2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197.exe
-
Size
5KB
-
MD5
29ecae02bfe3d0a91393ef357a50e5d8
-
SHA1
e057caba5681a031964d333758f1cce7e6708575
-
SHA256
2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197
-
SHA512
552442b1f7585100d6c3f7399c592253311537dd012243b1e5750304f75fecca21004902f8d966ded82be7e460f5cfacf25cca5a5d9e2c64957c9964f8020f49
-
SSDEEP
48:SnlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tDRuqSxp:IWLkFfNnOKYloIQ2pm2pbYSZxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3204 1308 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197.exe"C:\Users\Admin\AppData\Local\Temp\2387b88c1b0df56e1526a8f2afa4aa3f9af756472ba552f88cad5e57dbf9b197.exe"1⤵PID:1308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1308 -s 2242⤵
- Program crash
PID:3204
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1308 -ip 13081⤵PID:4420