Analysis
- max time kernel
145s - max time network
168s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
09/03/2024, 18:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target 0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d.exe
- Size 162KB
- Sample240309-xehtjsfg7t
- SHA256 0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d
- MD5 272a97e86a32d668788ddd7bbbc6df37
- SHA1 19eaec81dadb7fb6df109fd37a02f9fe074c1f78
- SHA512 77412c1e0ec6244ac203ccc97ca4dbfde122eb976d897f5167feee0556c16a82ed4671242758d3b973770af9ddaf8e519e06ad4ca5a03b45087fda27983e219f
- SSDEEP 3072:6V1ZB5CN6738Cpw5RCpw5sANR4Cpw5RCpw5H:6Vl5+63vw5Kw5sy1w5Kw5H
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5116 1372 WerFault.exe 94
Processes
-
C:\Users\Admin\AppData\Local\Temp\0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d.exe"C:\Users\Admin\AppData\Local\Temp\0337053129b0b7c50af44b3027add9efb29cc6dcf38a59eb65536b445dcc162d.exe"1⤵PID:1372
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1372 -s 2402⤵
- Program crash
PID:5116
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1372 -ip 13721⤵PID:1032
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4100 --field-trial-handle=2272,i,1589057049575649654,2929151440327217574,262144 --variations-seed-version /prefetch:81⤵PID:1940