Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
05-03-2024 12:37
Static task
static1
Behavioral task
behavioral1
Sample
1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0.exe
Resource
win10v2004-20240226-en
General
-
Target
1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0.exe
-
Size
2.8MB
-
MD5
b58334fa58adda7b6bc79348ea861d60
-
SHA1
31ddad426210d29e750590df6eb2a360947e040a
-
SHA256
1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0
-
SHA512
7314cb03295566f75a8c22a80807ab34fb2344efa515b5713e646b97f6f661e31536f2491b832fed7cf2d978563a6f54994df44e9812c406f3c6021211808cb7
-
SSDEEP
49152:hmcwa5+yeG/7v0AvYYYYYYYYYYYRYYYYYYYYYYE3iA7/eFUJN9ojoso2xno1J:YctheGwAvYYYYYYYYYYYRYYYYYYYYYYw
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1300 4888 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0.exe"C:\Users\Admin\AppData\Local\Temp\1464485c51a1c65832c9836437f43256df277f0f52b8915a8a1a87eea3796bf0.exe"1⤵PID:4888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4888 -s 2202⤵
- Program crash
PID:1300
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4888 -ip 48881⤵PID:4564