Resubmissions
13/04/2024, 09:24
240413-ldke7sfe9s1013/04/2024, 09:21
240413-lbh5cscf2913/04/2024, 09:21
240413-lbhhtsfe8v1013/04/2024, 09:21
240413-lbef6sfe8t1013/04/2024, 09:21
240413-lbd6eafe8s1013/04/2024, 09:21
240413-lbdvmsfe711009/04/2024, 08:13
240409-j4mxxaad331009/04/2024, 08:13
240409-j4ml5sad321009/04/2024, 08:13
240409-j4l1lsad291009/04/2024, 08:13
240409-j4lpvaad2810Analysis
- max time kernel
92s - max time network
98s - platform
windows11-21h2_x64 - resource
win11-20240412-en - resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system - submitted
13/04/2024, 09:21
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
sample.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral4
Sample
sample.exe
Resource
win11-20240412-en
Behavioral task
behavioral5
Sample
out.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
out.exe
Resource
win10-20240404-en
Behavioral task
behavioral7
Sample
out.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral8
Sample
out.exe
Resource
win11-20240412-en
General
- Target out.exe
- Size 986KB
- Sample240413-lbdvmsfe71
- SHA256 0154ba026bf77b2a782af5684118f0676cbe72ab784c43a898c585e8f42b3d0d
- MD5 feb7d24f344b09e79161b8a500c55df0
- SHA1 2b8c74e4ad71335ff88b04aca9ac878201f73134
- SHA512 464cc7e52063507dbb0780f784a93d490aaddcf2047acf557e7376c297e0e618b98240361cc290a50854717bb562e5a419e84e1e633e149a4a02c63a657d6697
- SSDEEP 3072:i7xOwLvY3cqd3d0djaas0G22rlFPIS2JY6kkI9MsomUTVlowUTyY+DGSb36ESb/Y:i7xdLvUcigjLGRfPYJ6NqP
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3532 388 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\out.exe"C:\Users\Admin\AppData\Local\Temp\out.exe"1⤵PID:388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 388 -s 2362⤵
- Program crash
PID:3532
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 388 -ip 3881⤵PID:4844