Analysis
-
max time kernel
160s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04-01-2024 07:30
Static task
static1
Behavioral task
behavioral1
Sample
6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc.exe
Resource
win10v2004-20231215-en
General
-
Target
6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc.exe
-
Size
5.5MB
-
MD5
82c3191d75e99f0ee987345d3e297fa9
-
SHA1
a5d6132678b39da23aacb897bf72cc289f6ba44b
-
SHA256
6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc
-
SHA512
156cbcc49313dbd37d910914de6d8eb622d92981ec560880f62abff09473b65646f8c68ff19fbdf261f378dcf0f2bef8d137acbc10d1558508c2b419ed45902f
-
SSDEEP
98304:IlcCU8C5Blsr8Qb1BPIDz5XT7JWrd4g8P8T649Sj0nqDo8eckicPjHK+m:IhUYrtqDzJm8kTP9Sj0nqDP
Malware Config
Signatures
-
Program crash 3 IoCs
pid pid_target Process procid_target 2308 4404 WerFault.exe 89 3120 4404 WerFault.exe 89 1316 4404 WerFault.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc.exe"C:\Users\Admin\AppData\Local\Temp\6fc9b9d5df4e81d56b85e2bc344c381b13fe0ca311c8ef1f6dd738116a1965dc.exe"1⤵PID:4404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 9202⤵
- Program crash
PID:2308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 9402⤵
- Program crash
PID:3120
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4404 -s 1402⤵
- Program crash
PID:1316
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4404 -ip 44041⤵PID:3092
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4404 -ip 44041⤵PID:3124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 500 -p 4404 -ip 44041⤵PID:3328