Analysis
-
max time kernel
153s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-01-2024 07:30
Behavioral task
behavioral1
Sample
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe
Resource
win10v2004-20231215-en
General
-
Target
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe
-
Size
316KB
-
MD5
cec5b5a0f4ac5de64aa1a13cc1daf94b
-
SHA1
34c83f89c4fb5d2f7eafa9fab7578960ee4e3e07
-
SHA256
af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce
-
SHA512
02b43f9561d31454ec817d393814d2d672c5785074c1917136500fa5e89cd04338f496d2933f81099d301b1c0e6e52d0ade4236bc7b608dc7530ceed34828196
-
SSDEEP
3072:F8PoFoXLhhyPiTJTQBgpv7eRXxSY04KHwRjti049jGQxe73BZLraX/XjFeBnbnTJ:yA6Lh7TNDpDepIH6jtz49r0GrFAXTn1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1764 3572 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe"C:\Users\Admin\AppData\Local\Temp\af5fc8115f184ea74a645c664a096cb0d275e94f2c5b004ebc0b13c9f40e51ce.exe"1⤵PID:3572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3572 -s 2202⤵
- Program crash
PID:1764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3572 -ip 35721⤵PID:3212