Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2024, 02:10
Static task
static1
Behavioral task
behavioral1
Sample
f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0.exe
Resource
win10v2004-20240226-en
General
-
Target
f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0.exe
-
Size
14KB
-
MD5
e37b22674e90b815af86101c6099f742
-
SHA1
7f7b5ab61dd7d3109641200dd0f36e9e60f19b15
-
SHA256
f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0
-
SHA512
e22d368652e9174c7975cd4ac4b71786094a0444e01a7e7bc029e42b382ec8119ae39be379a18f0708b1c0bf100675d0a4f4636374b747048b40ddedbc62b157
-
SSDEEP
384:xcwjZgizj5ABhWoolT7B08jDRBNiKYBduLvDE045H:+wjZBjGDWooVRjdBQ9uL7A
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2420 4812 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0.exe"C:\Users\Admin\AppData\Local\Temp\f57e62fd694384c410a081cc64e1cc0b00d7f3c4fbb43ca568c9ff394d9297c0.exe"1⤵PID:4812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 2562⤵
- Program crash
PID:2420
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4812 -ip 48121⤵PID:2364