Analysis
-
max time kernel
149s -
max time network
88s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 20:04
Static task
static1
Behavioral task
behavioral1
Sample
e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c.exe
Resource
win10v2004-20231215-en
General
-
Target
e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c.exe
-
Size
277KB
-
MD5
698175ff27dcaf28a53e97604920912f
-
SHA1
e391ccc9cbbee1bd2825ded6465cccca8e42ffab
-
SHA256
e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c
-
SHA512
e515f04208afb1e7af4e16ee98a598d0dc76f6179e4b8651b25bec4eaf85f9955af535625f709b3cb231b11c20eea19660f0b7aff8ab269cfd0c8c6ede874a8c
-
SSDEEP
6144:UNAyl/DRfkTC3dM7B+mCGBV+UdvrEFp7hKeT:UNAylbRfky6B+mCGBjvrEH7rT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1248 3096 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c.exe"C:\Users\Admin\AppData\Local\Temp\e92bf7c6e3a99398920b71aef6fdddb6cbcfb468e051c39ba5e097c3e5e3046c.exe"1⤵PID:3096
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3096 -s 1802⤵
- Program crash
PID:1248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3096 -ip 30961⤵PID:1928