Analysis
- max time kernel
12s - max time network
14s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
02/04/2024, 05:55
Behavioral task
behavioral1
Sample
WiFiScanner.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WiFiScanner.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target WiFiScanner.exe
- Size 10.7MB
- Sample240402-gmetvsaa9w
- SHA256 120b9ffdd3a10c2d764c81b4e8b12e0102ceb93a7bd21826003932d0450d9b30
- MD5 e25c94fae888367a13213fbde3b31848
- SHA1 c66d2011141465294884a3960a45d1b1dec334ed
- SHA512 1985ef0e4581dc1f58535b813e4a3d823c04bc24b65b9a05c3dc4b6efb67d06570f5ab6d02d61a571cf0a29df6ef9ed89c27f0fc982c3da59e4fac5b87153755
- SSDEEP 196608:tFfjwCBkyoikjCkeNYTcQwPHCkeNYTcQwcctTYCkeNYTcQw:nmylv7C
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 5116 4348 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\WiFiScanner.exe"C:\Users\Admin\AppData\Local\Temp\WiFiScanner.exe"1⤵PID:4348
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4348 -s 10642⤵
- Program crash
PID:5116
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4348 -ip 43481⤵PID:684