Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2024 02:20
Static task
static1
Behavioral task
behavioral1
Sample
a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd.exe
Resource
win10v2004-20231222-en
General
-
Target
a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd.exe
-
Size
5KB
-
MD5
d8b724a069a397bdfd5dc484e21db6a1
-
SHA1
cf0f7ab361e7c75049ea5f02292841422b9c9050
-
SHA256
a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd
-
SHA512
bd0f94bec4e917537fa23f3473c16dbb31539c86c12874b0ca04a3e80f2076ae866fe01d79b2265efb4832dbb492ea72e78ee4db431bc4f21447a6e460cf48d9
-
SSDEEP
48:SolXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t4RuqSxp:VWLkFfNnOKYloIQ2pm2pbYSkxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5056 3156 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd.exe"C:\Users\Admin\AppData\Local\Temp\a3743d66835258e1e4e47e77b2d2668ede2baa413705a023ce06a284fce445cd.exe"1⤵PID:3156
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3156 -s 2242⤵
- Program crash
PID:5056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3156 -ip 31561⤵PID:1252