Analysis
-
max time kernel
138s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
12-02-2024 19:35
Static task
static1
Behavioral task
behavioral1
Sample
6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe
Resource
win10v2004-20231215-en
General
-
Target
6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe
-
Size
599KB
-
MD5
6b6bc308a98c6434ed83fe4c7ef219ac
-
SHA1
3fa17ca2993656931a2164f7ab7f8cfb404e2562
-
SHA256
6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08
-
SHA512
d78afd2514d5310cf05fb72ec505c97f609237501e31ce4b111001a3ba104e7055173fd86c5ec0d42b547d718332b337059c28851459d1c4f1fb2051da5f3844
-
SSDEEP
12288:vc7gKNkhm/JuyXnPB+B8WHLPatS1nkTbsBmmuO87Hitjq8s8:E7zNkhm5PB32Pa81kTbsBmmuF7Hijq
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 324 2764 WerFault.exe 6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe"C:\Users\Admin\AppData\Local\Temp\6606b54e4a22138389c293137a5f095797527c19fdbd2210728b0692181c4d08.exe"1⤵PID:2764
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2764 -s 3482⤵
- Program crash
PID:324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2764 -ip 27641⤵PID:2460