Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
19-03-2024 22:07
Static task
static1
Behavioral task
behavioral1
Sample
84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e.exe
Resource
win10v2004-20240226-en
General
-
Target
84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e.exe
-
Size
14KB
-
MD5
9bc69ede0eba5bc9cb7ed51a5dc849d7
-
SHA1
712384f0057ac1dffe58bfe17982293f17bec1dd
-
SHA256
84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e
-
SHA512
7e23a4ac10b4f67ff9226232b4082b98ae627fe5c0e9255dcb00afd493f468f65bcc9dce9115a44f3e92948780bd00a4e68b484b8f93692e5e177a33d54c0792
-
SSDEEP
384:LWsQi6KcQu5CMmnbpro6dW/AmH5DE045HVHdSdSdSd:CsQij24bVZdCZARooo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 684 4508 WerFault.exe 92
Processes
-
C:\Users\Admin\AppData\Local\Temp\84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e.exe"C:\Users\Admin\AppData\Local\Temp\84d71d9f7219bc67be393dc9b5d31dbf6c54a4d3f072e98c48db0c3a37e8d21e.exe"1⤵PID:4508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4508 -s 2122⤵
- Program crash
PID:684
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4508 -ip 45081⤵PID:1008
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3944 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:81⤵PID:732