Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 12:47
Static task
static1
Behavioral task
behavioral1
Sample
827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0.exe
Resource
win10v2004-20230915-en
General
-
Target
827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0.exe
-
Size
1.4MB
-
MD5
ebe568249a8e8a1c874980f99ad20cd3
-
SHA1
059c0f676ef67f4fbfab7caea812f654479aa6d7
-
SHA256
827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0
-
SHA512
762bc1f60200aba5406bfd40a403d3605726bfc7c572987953eefdab9d98ff11abf2c24cacada8ac6dc1de38a79719617911a0e3ce7004da7937e8c03c13b761
-
SSDEEP
24576:1H4mPc+8nNXlhd9FSNNFxhMT2itpoEwjnVLff+ydgjustG5+:1H4m0ZVlPKNNLhMT7cJR1u6MGc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2312 4772 WerFault.exe 74
Processes
-
C:\Users\Admin\AppData\Local\Temp\827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0.exe"C:\Users\Admin\AppData\Local\Temp\827fbf15bac34f4a3866c170066a950897e197689d7c560eb95ec13895f44fe0.exe"1⤵PID:4772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4772 -s 5522⤵
- Program crash
PID:2312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4772 -ip 47721⤵PID:3496