Overview
overview
10Static
static
10985196a6ca...88.exe
windows7-x64
3985196a6ca...88.exe
windows10-2004-x64
3ca7bca7285...84.exe
windows7-x64
1ca7bca7285...84.exe
windows10-2004-x64
3e8c962d87f...8c.exe
windows7-x64
3e8c962d87f...8c.exe
windows10-2004-x64
3f8b04b38e2...22.exe
windows7-x64
3f8b04b38e2...22.exe
windows10-2004-x64
3Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 07:47
Behavioral task
behavioral1
Sample
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
ca7bca7285aec72cc48a9d82390d5b84f99b84c5989f69f45b9453ae3bc37284.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
e8c962d87fc05c1dadc2db822ef174c73f02754271f563a5e1e83d0ebd08528c.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
e8c962d87fc05c1dadc2db822ef174c73f02754271f563a5e1e83d0ebd08528c.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
f8b04b38e2c941657114b67a47aee8993a3f0d7e080eeb31fb681bf360546722.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
f8b04b38e2c941657114b67a47aee8993a3f0d7e080eeb31fb681bf360546722.exe
Resource
win10v2004-20230915-en
General
-
Target
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe
-
Size
396KB
-
MD5
39f51ab15d43f2b108bafb914f0c0f6c
-
SHA1
bef8d51df190756387f79d9e251f5e9b6d78662e
-
SHA256
985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188
-
SHA512
2baf96979ea80f04256031ca27465720da586521949aa8bc5314e378517732bc96226a4cff69c848a4a5612acae9223138107b4e35b7e3306ffb03396946b074
-
SSDEEP
12288:7RxRvPTq4M4TUmLJLMCAuMjpUx5jbSiwDrweS:7RbdMW9LJMCAuMihSiy
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3256 3040 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe"C:\Users\Admin\AppData\Local\Temp\985196a6cae060e6c03f8c8cc506303ad5d717bf44c4985e6267148c02f59188.exe"1⤵PID:3040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3040 -s 13642⤵
- Program crash
PID:3256
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3040 -ip 30401⤵PID:2288