Analysis
- max time kernel
142s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20240221-en - resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system - submitted
24/02/2024, 01:25
Behavioral task
behavioral1
Sample
d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
Resource
win10v2004-20240221-en
1 signatures
150 seconds
General
- Target d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe
- Size 2.7MB
- Sample240224-bs993adg47
- SHA256 d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500
- MD5 a595e14827801c600ab105c2a12618da
- SHA1 b6a306d531a3848a28bc9cf88794853eeca1e6ba
- SHA512 34aeb4d98269de945d2db94f63080062e491e7565fd87660678ae9aad2ca684400d39454e951bc75b0c4bd6d7072c65c108324823aa606f35ce44c6f4af93a62
- SSDEEP 24576:V/sn9+gS6uHk1U4QR+hzy3cHoORwqetii6hsuiWvIkNQIb6PXSc:WLS6uH8U5RHiohWR6a
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5028 3640 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe"C:\Users\Admin\AppData\Local\Temp\d1191738c3cd169b126b73da7955d554bdcbdbcf9f879dd54ef3d44355bd2500.exe"1⤵PID:3640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 8242⤵
- Program crash
PID:5028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 364 -p 3640 -ip 36401⤵PID:4192