Analysis
-
max time kernel
145s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 08:39
Static task
static1
Behavioral task
behavioral1
Sample
744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe
Resource
win10v2004-20230915-en
General
-
Target
744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe
-
Size
498KB
-
MD5
26ac38bd13eddf61277f7302563454ff
-
SHA1
01ac4a03767ed0335dd0b3e0e97689c11350ae8d
-
SHA256
744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422
-
SHA512
c0171429df12ed285de6c3b31fb924f7f046653ad49b975f99cbe1f9523a6526924ad8d7bcdc583c039b9e846781135094037958c12c4c16f6a69de1927ff5cd
-
SSDEEP
6144:fw8TFcuzqCOxayoQmo+4SkZjKb8XiRWzcD8uNnViHRJDvWqTba8gc:omzzLOxaysDSXzXuNVUDvWu28
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2876 4052 WerFault.exe 21
Processes
-
C:\Users\Admin\AppData\Local\Temp\744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe"C:\Users\Admin\AppData\Local\Temp\744c4056aa739141c08604dd97783483245bc6ea0cabb1c87cea3ab9fb145422.exe"1⤵PID:4052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4052 -s 9362⤵
- Program crash
PID:2876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 4052 -ip 40521⤵PID:3176