Analysis
-
max time kernel
143s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23-02-2024 05:09
Static task
static1
Behavioral task
behavioral1
Sample
5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0.exe
Resource
win10v2004-20240221-en
General
-
Target
5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0.exe
-
Size
74KB
-
MD5
9219e2cfcc64ccde2d8de507538b9991
-
SHA1
181e59600d057dc6b31a3b19d7f4f75301a3425e
-
SHA256
5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0
-
SHA512
81aa2fbde8567f4a3446d56a8fec8b346f9c4093f5baa32db4069644ad3fec64c6c2d749173557e5247144b92fa12ddb14de55ca3687867d4aea4c37124c9f54
-
SSDEEP
1536:m+6OXCt1SXBW0bBaKLXDduSOxqEDX0+G3L6f2X4ZmfwhRYE:/6Y41aBNbBBXkSCPDMV4hmE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5096 2988 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0.exe"C:\Users\Admin\AppData\Local\Temp\5af3fd53aea5e008d8725c720ea0290e2e0cd485d8a953053ccf02e5e81a94a0.exe"1⤵PID:2988
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2988 -s 2642⤵
- Program crash
PID:5096
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2988 -ip 29881⤵PID:3320