Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05/03/2024, 11:52
Behavioral task
behavioral1
Sample
95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810.exe
Resource
win10v2004-20240226-en
General
-
Target
95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810.exe
-
Size
483KB
-
MD5
4751bad99778021719b930f18d6b0a49
-
SHA1
4449169400a80ed5c9b91194c18a5e4ec49f88cf
-
SHA256
95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810
-
SHA512
e3a35a42f321aff1cf10d906a80710db1bec26a601532fc36814a26e9a704b6a35916a2076fc69ce0ecbb198f1f2fd2840f2f47b565ada67ac612f9bc61ec33d
-
SSDEEP
6144:SXIktXfM8Lv86r9uVWAa2je4Z5zl4hgDHQQs4NTQjoHRsAOZZsAX4cNk5Gv:SX7tPMK8ctGe4Dzl4h2Qnurs/Zsdcv
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4092 4308 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810.exe"C:\Users\Admin\AppData\Local\Temp\95ff1c5f15acacaa3357baa3041849627496edae10dbfa38f8c82133c2bed810.exe"1⤵PID:4308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4308 -s 2162⤵
- Program crash
PID:4092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4308 -ip 43081⤵PID:3752