Analysis
-
max time kernel
92s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
16/04/2024, 16:03
Static task
static1
Behavioral task
behavioral1
Sample
5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc.exe
Resource
win11-20240412-en
General
-
Target
5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc.exe
-
Size
359KB
-
MD5
e9dcd383bbc2feb2616d14d0f1a31822
-
SHA1
198ba4244f53dba2b8b4a13ffd11446659dbeb3f
-
SHA256
5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc
-
SHA512
44105b0fcfc10ef7339675852bfd840e15dcb7850c67dba9b1938c043ddf25528f116f9ce89d74457398e9518c71c44e6f8073e4d78e4dd6c739960607c5c1fc
-
SSDEEP
6144:oLIw3ZKQcaPg5+xH8lL5Tvm8+uoJyw/oBGnDvWJ9b6:oMw3YQr8lL5KaoMzGR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4948 5036 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc.exe"C:\Users\Admin\AppData\Local\Temp\5ec5403acc74b12032050f5205675db826ed9af5c571015b68153c4d6ea0dbfc.exe"1⤵PID:5036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5036 -s 4002⤵
- Program crash
PID:4948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5036 -ip 50361⤵PID:1520