Analysis
-
max time kernel
142s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
20/11/2023, 00:59
Static task
static1
Behavioral task
behavioral1
Sample
a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4.exe
Resource
win10v2004-20231020-en
General
-
Target
a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4.exe
-
Size
8.6MB
-
MD5
952edea295f075c71e8b2d3261780f1f
-
SHA1
13f2b11e9d89912c8f38da9d23ac5e4ed96f189b
-
SHA256
a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4
-
SHA512
30667b2afd9e93d130a2f72f334e0e621a5d56ff79d7b9cfb41b6402f47478e0a80200a8f6926409add90cea305bd4dfc2c1b26b5dfe5a164cde947ae8338093
-
SSDEEP
196608:VjiY5YYd6tqtbdySy+5sXM86vW+BDM7GdN2Hy4STyaw:U18K+5sX61M7sN2Hy4SeT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5064 452 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4.exe"C:\Users\Admin\AppData\Local\Temp\a0314d950c3b7c759f5e401bfcaab36d6f5d03104199d6856107a1711d14bba4.exe"1⤵PID:452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 452 -s 8202⤵
- Program crash
PID:5064
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 452 -ip 4521⤵PID:2168