Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-02-2024 18:46
Static task
static1
Behavioral task
behavioral1
Sample
e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe
Resource
win10v2004-20231215-en
General
-
Target
e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe
-
Size
155KB
-
MD5
770dbf494e8a94aaa9c407a9283f5f3a
-
SHA1
cc46dc4ee85ce2b1ae13ed4edc5085a04cd94634
-
SHA256
e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63
-
SHA512
16277916933e19313f355fead1b7395a714352db71979858916fdd0acf5c5784f457eab08b7663c4a32d599988c84e6f2a130b9b3aaa875753e37808245a7318
-
SSDEEP
1536:BUFOA/qfBSEawJiMFoMcJS8SNu3NbfO5rKJZp0wFti5n4jSmhHg2j554hEB/dBa:iF4SRiouNngAx8h5dZdhfqTQn4M
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5012 4876 WerFault.exe e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe"C:\Users\Admin\AppData\Local\Temp\e604d5e210fbe81f3a5a8a3408724c516b41898e674b6ffe2b25e8e9d2343e63.exe"1⤵PID:4876
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 3882⤵
- Program crash
PID:5012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4876 -ip 48761⤵PID:3276