Analysis
-
max time kernel
90s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
27/03/2024, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4.exe
Resource
win10v2004-20231215-en
General
-
Target
5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4.exe
-
Size
14KB
-
MD5
6b6788a51c23a6717195fe5bd5fe8e45
-
SHA1
0b6cf653d55c389704308a3d2eecc19e2d73008c
-
SHA256
5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4
-
SHA512
aad0c1c6dc6d991a66e472ebf7c969974357189bc233b3670cf0a295f80ef1bb8e9ad3c20660228666e7942bc5f2f785680ba44d76fa274387bbbeef7a0c35c7
-
SSDEEP
384:XkWKRtgc4L/1EA9nYT2ywBiRODE045H+eFeFeFe:XkWKRtgc4aAi6yWKkABooo
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1700 3508 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4.exe"C:\Users\Admin\AppData\Local\Temp\5a52b77505f09c548da04b0280e6db0feef2fa8abd09ed97b857702208236cc4.exe"1⤵PID:3508
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3508 -s 2162⤵
- Program crash
PID:1700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3508 -ip 35081⤵PID:3736