Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
18-11-2023 09:31
Static task
static1
Behavioral task
behavioral1
Sample
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe
Resource
win10v2004-20231023-en
General
-
Target
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe
-
Size
1.0MB
-
MD5
089f5b0c4f704e7aa6dc39c08bcbe462
-
SHA1
32bec282b88e7df32b2315a2724bde5cdb4ddb25
-
SHA256
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9
-
SHA512
c33fee68eef8adb19fff2684d62ae4e5cb9d76b20c18dff0055987b72277b978acd9c5867560cb7e89e69f8838b8cee79aba771d2700483687c182c914b8389a
-
SSDEEP
12288:9NIjlb56bPTPyvac3oSJMy6tSodW1x2XGhj79wUYYjxdQl4Fj11nkgunWbBSRwW5:7RbyoSJP6tSodW1y+ZwWjxTfMfZDlsHG
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 404 1148 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe"C:\Users\Admin\AppData\Local\Temp\70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe"1⤵PID:1148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1148 -s 4882⤵
- Program crash
PID:404
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1148 -ip 11481⤵PID:4604