Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11-04-2024 07:20
Static task
static1
Behavioral task
behavioral1
Sample
d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40.exe
Resource
win10v2004-20240226-en
General
-
Target
d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40.exe
-
Size
5.5MB
-
MD5
327fdd5a7402581094c2a7f6896df4a6
-
SHA1
ea50c5916835b22858359832e91c54794625bca9
-
SHA256
d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40
-
SHA512
099fd133e86c6716ee246ee407c2e9f8d43c0dfcdaa8407d5e91213a4a1a7f04b41abdbeedb0e94766b47e3e7bbc008e571d5dce1082ab46cf4480ab2b4840b0
-
SSDEEP
98304:XwoFR5L5rIysfJf+rOjEEJ4EEZu2yJSnFIWNW86Kv8965G04P:5dat+rOjaZA8Fj6qw65
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2444 2432 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40.exe"C:\Users\Admin\AppData\Local\Temp\d9875409b9d210378b272017213bd66f924ad5559624ddf940434cde759f0d40.exe"1⤵PID:2432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2432 -s 5242⤵
- Program crash
PID:2444
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 2432 -ip 24321⤵PID:2852