Analysis
-
max time kernel
91s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2024, 01:01
Static task
static1
Behavioral task
behavioral1
Sample
d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a.exe
Resource
win10v2004-20231215-en
General
-
Target
d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a.exe
-
Size
14KB
-
MD5
dda0ecb06380e3b883833a73c3d2eca2
-
SHA1
c2978778bfbbfa9485ce39920d4f4f82552f90fe
-
SHA256
d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a
-
SHA512
8535a0e3309844f0bfa67418966e220ae39e9858f6fb889de805e08c0fdeb9d453f4b50021624e2fc40cf2da7a9d5ad62f024eab8e314939b3a917ec289e0eae
-
SSDEEP
384:nZirCaY3Zl2zoDpqT6YxNqKrG6bEMDE045HzQQQQ:ZlaYX2yqoK3bNAxQQQQ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1368 956 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a.exe"C:\Users\Admin\AppData\Local\Temp\d63d126fe3ebe6a64849497a817fc298478e71959581619d89c629f2e5fe470a.exe"1⤵PID:956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 956 -s 1922⤵
- Program crash
PID:1368
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 956 -ip 9561⤵PID:3424