Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 05:38
Static task
static1
Behavioral task
behavioral1
Sample
da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe
Resource
win10v2004-20230915-en
General
-
Target
da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe
-
Size
1.8MB
-
MD5
6a079e75af8c77770b471a26e978a298
-
SHA1
7954e161de0efb110911a4c7554d456b52eaaf95
-
SHA256
da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d
-
SHA512
4511fb73c77599458c28def99675a91901b9041717f2382d9cef0afebb3a2cfc586c8d0591e7d130c087e2d6dc78fd1f506e484663203b4fe6f4eeeac6f3847f
-
SSDEEP
49152:vuQqJ4djB9caTytwC+a/g6jSHHbd0z4tFsab6DtFM:GIjDciy2C+0gwm7dgCTb6
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4564 4976 WerFault.exe 84 4092 4976 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe"C:\Users\Admin\AppData\Local\Temp\da2eab0cd5099a97f1f5f342527ad20f8cf5ac9a90e25663ba779974d5a42a2d.exe"1⤵PID:4976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 5202⤵
- Program crash
PID:4564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4976 -s 5682⤵
- Program crash
PID:4092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4976 -ip 49761⤵PID:1524
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 512 -p 4976 -ip 49761⤵PID:4536