Analysis
-
max time kernel
164s -
max time network
173s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
15-10-2023 17:56
Static task
static1
Behavioral task
behavioral1
Sample
f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600.exe
Resource
win10v2004-20230915-en
General
-
Target
f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600.exe
-
Size
277KB
-
MD5
6c8aaaf479827b73a9d2f4af5eab57cb
-
SHA1
fff2bc604a5d93727f217a14466f6db05a234ef9
-
SHA256
f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600
-
SHA512
13381f13d706058f36a0e846f8c6e25ef56129a7f84356b498edb2ba597effa190da65456e9451d6d0ff7604d11a5c44b4c8a8290426872e333331e3bf946735
-
SSDEEP
6144:4Adl/DRfkLQLC3dM7B+mCivBV+UdvrEFp7hKiP:4AdlbRfkLQK6B+mCABjvrEH7fP
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 644 3600 WerFault.exe 48
Processes
-
C:\Users\Admin\AppData\Local\Temp\f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600.exe"C:\Users\Admin\AppData\Local\Temp\f3eee03b904cf68af2c4ebfa6d3330a3003840969f49b194fba339c809ecc600.exe"1⤵PID:3600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3600 -s 1802⤵
- Program crash
PID:644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3600 -ip 36001⤵PID:212