Analysis
-
max time kernel
90s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2024 02:32
Static task
static1
Behavioral task
behavioral1
Sample
f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52.exe
Resource
win10v2004-20231222-en
General
-
Target
f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52.exe
-
Size
5KB
-
MD5
c7634f4e3a835d00abd3dc5d6db8d348
-
SHA1
3b3a60b96aa1ac84f853d884abd6f67d272e2e0b
-
SHA256
f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52
-
SHA512
63822c814f3cc9588b8b5c5f28b9f1d9702fdfb3acc4107f7afa4d24064fad0cf70956cf11e4c7577df1d759781d864ec7e3f36113e2f1e51d97a1cacdfc39d7
-
SSDEEP
48:SalXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tsRuqSxp:DWLkFfNnOKYloIQ2pm2pbYSIxE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5072 1732 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52.exe"C:\Users\Admin\AppData\Local\Temp\f8c50f0a2804cd25520d3ea9f28892a7405ab1e6e0319bfb1802202a7b96af52.exe"1⤵PID:1732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 2242⤵
- Program crash
PID:5072
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1732 -ip 17321⤵PID:2396