Analysis
-
max time kernel
139s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
18/02/2024, 20:36
Static task
static1
Behavioral task
behavioral1
Sample
9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf.exe
Resource
win10v2004-20231215-en
General
-
Target
9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf.exe
-
Size
3.7MB
-
MD5
2cb98ee2ee714815969f2a6fff8276a7
-
SHA1
e54ae85946c5c8caa18b6cbdda5c293bcd26b0df
-
SHA256
9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf
-
SHA512
5c883c5d491ce973a23f3740d28992249a7ddd1e62de732204c785f6a6a07b3ecca9cd9ea0fbe2125522a8c3e6bc9c029a5f1cf94b7de7460cf4680d45b0a719
-
SSDEEP
49152:8vODNjdUoszTB8QWQB5QZuTtS0rQMYOQ+q8CEP6m/JTvdK0PQgj1SQYSQE9KFeMb:8mDLP+WsM0r1QnYL/JRKIJEQFf0Feu
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2192 100 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf.exe"C:\Users\Admin\AppData\Local\Temp\9f5a8a06b512e14b72219cf5fdd4a33d36ecbd0fd2276d543de065026d62fbbf.exe"1⤵PID:100
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 100 -s 4162⤵
- Program crash
PID:2192
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 100 -ip 1001⤵PID:2964