Analysis
-
max time kernel
133s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 07:57
Static task
static1
Behavioral task
behavioral1
Sample
153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af.exe
Resource
win10v2004-20230915-en
General
-
Target
153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af.exe
-
Size
5KB
-
MD5
499d94a80a265aab0a282996ece8b3d5
-
SHA1
34aea4e2197a94f1269609e382dbf31d8cd08322
-
SHA256
153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af
-
SHA512
6a8c065ea3e9c216d1e4e27c75eb8b6fd4411cfbff4282191fc0d49e74d8e07f5771244a55d0ad39fd76637c257221381786de6f55b251e79b8d078031f30718
-
SSDEEP
48:SClXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t8RuqSxp:LWLkFfNnOKYloIQ2pm2pbYSQxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4456 4148 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af.exe"C:\Users\Admin\AppData\Local\Temp\153a79db76987ef7eaae02208a10b1b1f90f9c61a3e421e43b2d1b159849e0af.exe"1⤵PID:4148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4148 -s 2242⤵
- Program crash
PID:4456
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4148 -ip 41481⤵PID:4384