Analysis
-
max time kernel
144s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
10/03/2024, 21:05
Static task
static1
Behavioral task
behavioral1
Sample
4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba.exe
Resource
win10v2004-20240226-en
General
-
Target
4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba.exe
-
Size
14KB
-
MD5
ae19820e1bf2ec490f57d2c837bb5875
-
SHA1
cd2b4befeb19276bd6a157115a79025afc078c93
-
SHA256
4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba
-
SHA512
75ac46c35471c74fe7cd589f3fdf59b5875ef0068ad73095dc61594f677fa2fafb05037c74426a840e697d804e3545fdf71805e74cd2a55c49c8c8047c69b08e
-
SSDEEP
384:I/pXaxMEePn08eta01XKcVfjfG2nk5oX9xcwDE045HsQbObO:wcU0H0MXtVys5Nx7AC
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4948 1432 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba.exe"C:\Users\Admin\AppData\Local\Temp\4e256bbecf24e4269c4fa56e2eb4ffd9bfa392fe82e92ae2566e5cc6846f4cba.exe"1⤵PID:1432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1432 -s 2162⤵
- Program crash
PID:4948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1432 -ip 14321⤵PID:5092