Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
14-04-2024 01:16
Behavioral task
behavioral1
Sample
a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe
Resource
win10v2004-20240412-en
General
-
Target
a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe
-
Size
1.7MB
-
MD5
e77a799ad913d2f47db9d46435ad647c
-
SHA1
79801fa24e4b82967c68f7350c40008089b09674
-
SHA256
a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1
-
SHA512
b15b623e2116d737f7d3d84e3ec8b411fe5620334adebd1636ca87b43f9a616c1486d5e4dfee342343294cd45ef66cfa89e93b32c39cd9ac9525f9a836f33b8b
-
SSDEEP
12288:bpvVlkjpsks9ncJwYkw0LOLHjHd3KfWwNU17o126+X6R24Fd0I4VDfVu09IUpMJz:BEsn9+gS6uHk1U4FOIkNVIWMJd9c1m
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target Process procid_target 4872 3648 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe"C:\Users\Admin\AppData\Local\Temp\a45ddfa2eaac85a3c27463f67d6c1275751c953caddeb3b954302d96b3278be1.exe"1⤵PID:3648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3648 -s 8242⤵
- Program crash
PID:4872
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 3648 -ip 36481⤵PID:400