Analysis
-
max time kernel
93s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
12-02-2024 19:35
Static task
static1
Behavioral task
behavioral1
Sample
03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe
Resource
win10v2004-20231222-en
General
-
Target
03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe
-
Size
277KB
-
MD5
6a5f8282e702d1a951b15aae8e5d13a3
-
SHA1
833e8d434e2c3629c7b5f6bc6ce18f91f664ffe2
-
SHA256
03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797
-
SHA512
1456e1c3381da2171cc8e5940ba0ae3c379d8821d4671916e2ea065d3f35a9602bff54aef58a8b7eac055103331daec90a4badb690570133709dbc9982596806
-
SSDEEP
6144:AAkl/DvNC3dMnB++CuBV+UdvrEFp7hK6h:AAklbvE+B++CuBjvrEH7th
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 640 2980 WerFault.exe 03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe"C:\Users\Admin\AppData\Local\Temp\03a1b8ef1c2b1eaade2fa0e0b670859a994420506183d3ac74e38523024ac797.exe"1⤵PID:2980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2980 -s 1802⤵
- Program crash
PID:640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2980 -ip 29801⤵PID:1440