Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28/02/2024, 21:33
Static task
static1
Behavioral task
behavioral1
Sample
f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe
Resource
win10v2004-20240226-en
General
-
Target
f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe
-
Size
1.7MB
-
MD5
2a9c1d26656d18f3366a7f7087d7c6ab
-
SHA1
b26368184e1022fab251d1144f014db860740d64
-
SHA256
f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f
-
SHA512
1c25a8b32dd70f25bf29b9d6f56211d0557017ea58ca3ca4966039baf2e07d6ca06016b06056f199a49d3440d553b0465cc9b62dd298c6d9842a0deb99c5c3e8
-
SSDEEP
12288:QUF30Ngj44ecDyfOkx2LIaB4CWKKCrZTGF/k8uMxtxPvvzphT:QU50d4ecWfOkx2LFBJbKkKF/eMNPjphT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3060 1152 WerFault.exe 59
Processes
-
C:\Users\Admin\AppData\Local\Temp\f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe"C:\Users\Admin\AppData\Local\Temp\f41b6239dadba4269e78da2658d7ee898eccd0753286a14f25e2a596fffcf31f.exe"1⤵PID:1152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1152 -s 4162⤵
- Program crash
PID:3060
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1152 -ip 11521⤵PID:4492