Analysis
-
max time kernel
117s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2024 18:51
Static task
static1
Behavioral task
behavioral1
Sample
ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25.exe
Resource
win10v2004-20231222-en
General
-
Target
ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25.exe
-
Size
5KB
-
MD5
972b3432b09dc821a1feb17e732b9441
-
SHA1
fbbeefc52144102e6c7475bbf0cf5cbd225c5d47
-
SHA256
ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25
-
SHA512
868177407cce5ef9d1a38806e94a448c4bf75d584c6f96d5fbff0314f1e68b7a0b5f10a5b8f6f26b3ec227b3f7d01f455e6299f27b791746cd41f122eb4efeb6
-
SSDEEP
48:SKlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t3RuqSxp:LWLkFfNnOKYloIQ2pm2pbYSNxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 468 1352 WerFault.exe 63
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25.exe"C:\Users\Admin\AppData\Local\Temp\ae187c863b0efead15490b12954357d78c7dcccb8b4a0e4bb0e990cb0aca4f25.exe"1⤵PID:1352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1352 -s 2242⤵
- Program crash
PID:468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1352 -ip 13521⤵PID:2824