Analysis
-
max time kernel
136s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/01/2024, 21:32
Static task
static1
Behavioral task
behavioral1
Sample
9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845.exe
Resource
win10v2004-20231215-en
General
-
Target
9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845.exe
-
Size
5KB
-
MD5
add56414a5889dd9988ff9c9f6c0e136
-
SHA1
41813b72e416210342afdbd2836d92e15a438dfa
-
SHA256
9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845
-
SHA512
c41e257ddd12bd94758557584de8cc935e2a52229b24a7413feecaa9f8975a1ba599f5a903e3689211b02067646ddbb72631c55d4dfc5b6df4c8dc3430471773
-
SSDEEP
48:SslXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tjBRuqSxp:pWLkFfNnOKYloIQ2pm2pbYSfbxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1700 4300 WerFault.exe 23
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845.exe"C:\Users\Admin\AppData\Local\Temp\9c09f72b57d0e827fbd12891a78c184c89e73629ca3b5dd329e1c579db0ea845.exe"1⤵PID:4300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4300 -s 2242⤵
- Program crash
PID:1700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4300 -ip 43001⤵PID:2028