Analysis
-
max time kernel
143s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 20:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c196331d56d7ad7f477a36b4c79bed93.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
c196331d56d7ad7f477a36b4c79bed93.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
c196331d56d7ad7f477a36b4c79bed93.exe
-
Size
126KB
-
MD5
c196331d56d7ad7f477a36b4c79bed93
-
SHA1
6270a48ec6a6fe0fefe3825a86bfc9686a714b41
-
SHA256
cb6f187436d67f3b09a314a2d701de85aaeee0446356d508b6989bc2c59315f3
-
SHA512
de4055ed0aa7e5e597fcc938cc0e5cb5713338d8b6621a8fe6caa71369162bc0e8cd8b1a8c153b241a5e30a791f47c326d5614ad78f3fb4b3ce03b8c2dfb109a
-
SSDEEP
3072:ZfJg5RUbqPN2N+h5Qc8gIbo28FMJ9p9x9Tqbv4T3bBMF0WwSxAQl:ZIxPQNCac8gqo28KJDNqbObBe0WjqQl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4260 1200 WerFault.exe 95
Processes
-
C:\Users\Admin\AppData\Local\Temp\c196331d56d7ad7f477a36b4c79bed93.exe"C:\Users\Admin\AppData\Local\Temp\c196331d56d7ad7f477a36b4c79bed93.exe"1⤵PID:1200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1200 -s 2162⤵
- Program crash
PID:4260
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1200 -ip 12001⤵PID:2296
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1380 --field-trial-handle=2496,i,15897292497548307209,13920214570023230813,262144 --variations-seed-version /prefetch:81⤵PID:3412