Analysis
-
max time kernel
150s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 13:52
Static task
static1
Behavioral task
behavioral1
Sample
5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56.exe
Resource
win10v2004-20230915-en
General
-
Target
5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56.exe
-
Size
1.2MB
-
MD5
6593dc367b50ce9865aaab0ee7c6b2ff
-
SHA1
84bc6d309cc468430e740ec203e93e25098c3a31
-
SHA256
5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56
-
SHA512
5543863c4e66485ec9c6f0b1552a365d9a75cef9538fe7a8930dc473d40aea6abc2c9f846846f5823228d176e75b1ed65e3157f3300dd4aebc45c87fa0b6901a
-
SSDEEP
24576:0nr55fJW7j22O+gtWyOfjKkHCKF2D8i4/JkkEfVpAdG2tws:C5fs7jLg4FjKICKFW8iKb4VpUG2ws
Malware Config
Signatures
-
Program crash 3 IoCs
pid pid_target Process procid_target 4512 388 WerFault.exe 27 264 388 WerFault.exe 27 1644 388 WerFault.exe 27
Processes
-
C:\Users\Admin\AppData\Local\Temp\5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56.exe"C:\Users\Admin\AppData\Local\Temp\5371834bd207fe835ba57ef52c8866a09eb068cbad7645d1f9ca2744cdb17e56.exe"1⤵PID:388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 388 -s 2402⤵
- Program crash
PID:4512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 388 -s 2482⤵
- Program crash
PID:264
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 388 -s 2762⤵
- Program crash
PID:1644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 388 -ip 3881⤵PID:4032
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 388 -ip 3881⤵PID:548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 388 -ip 3881⤵PID:864