Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
06-01-2024 23:02
Static task
static1
Behavioral task
behavioral1
Sample
70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc.exe
Resource
win10v2004-20231215-en
General
-
Target
70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc.exe
-
Size
5KB
-
MD5
4d1573c4e300f1b30935db9130e056c1
-
SHA1
65e7b84aa83b61f9a25ed0af65fee568422d303d
-
SHA256
70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc
-
SHA512
9e35b5a7d96005b822aaf49571c7e2e85d9a891b7a809828002d764fe668fe7711ab860aa9b2b65f7007f5bc463e226264ebb7ad0282bba515344c1da56162ab
-
SSDEEP
48:SUclXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tRRuqSxp:PUWLkFfNnOKYloIQ2pm2pbYSfxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 828 4180 WerFault.exe 16
Processes
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4180 -ip 41801⤵PID:1540
-
C:\Users\Admin\AppData\Local\Temp\70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc.exe"C:\Users\Admin\AppData\Local\Temp\70c588f2283fd20b408f2de334f3a294b0217864e29c51e75b7966545cd7effc.exe"1⤵PID:4180
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 2242⤵
- Program crash
PID:828
-