Resubmissions
15-04-2024 11:31
240415-nmzycsff4y 1010-04-2024 04:57
240410-fljwradc86 1010-04-2024 04:57
240410-flcsfadc82 1010-04-2024 04:57
240410-flb6xadc78 1010-04-2024 04:57
240410-flbkdadc77 1019-12-2023 13:06
231219-qcfg3sadbq 10Analysis
-
max time kernel
460s -
max time network
1181s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system -
submitted
10-04-2024 04:57
Behavioral task
behavioral1
Sample
2d3ba7dd14b9a579b2626fa5baee19bd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d3ba7dd14b9a579b2626fa5baee19bd.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
2d3ba7dd14b9a579b2626fa5baee19bd.exe
Resource
win10v2004-20240226-en
General
-
Target
2d3ba7dd14b9a579b2626fa5baee19bd.exe
-
Size
209KB
-
MD5
2d3ba7dd14b9a579b2626fa5baee19bd
-
SHA1
dd365103583cfb3c10b73efc6592f8b80c1d75e0
-
SHA256
42a191ee4f9593db8f514cce85ad8b9d6533bc71983a9529e7a5d68764d21679
-
SHA512
29efd1035df73572efea0d96017772481b9858855c12d1bb96fc6a4ccd49443a4bb0d1bd86c69dda4218f04e8855ec37c4515157b75a240a530792232c4f03c0
-
SSDEEP
6144:YDnLgI91y1UkT57iJz/DpURWPSvHuUiYphu1UY:cnLh9yn52rpUR5vHuRYpM+Y
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/4996-3-0x0000000000400000-0x00000000045F0000-memory.dmp upx -
Program crash 1 IoCs
pid pid_target Process procid_target 4764 4996 WerFault.exe 75
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d3ba7dd14b9a579b2626fa5baee19bd.exe"C:\Users\Admin\AppData\Local\Temp\2d3ba7dd14b9a579b2626fa5baee19bd.exe"1⤵PID:4996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4996 -s 2402⤵
- Program crash
PID:4764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4996 -ip 49961⤵PID:3040