Analysis
-
max time kernel
93s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
17/04/2024, 09:28
Static task
static1
Behavioral task
behavioral1
Sample
da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe
Resource
win10v2004-20240412-en
General
-
Target
da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe
-
Size
345KB
-
MD5
9956354fe3a5fcba6a208bf28e164317
-
SHA1
bfeb0132dae76f57f0a1c255b02a8f56eab3ef13
-
SHA256
da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c
-
SHA512
88f285aa580b73faf7b9db4e119ac2b67f139ad08c5421eab6404c6560b29411e5495b5428d9c6f54cddad4940c69829efc2faa4398fd893b08e2fc28356d2e0
-
SSDEEP
768:jHp73JTio6M8etrfk7p4jjy79Fl+phaokUhILisKl4q7:Dtltbk2jj2FlzoGisKld7
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2936 1932 WerFault.exe 82 652 1932 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe"C:\Users\Admin\AppData\Local\Temp\da6e58406763d60bfb8c4cdbefc08aefe6bcc0b086266be479f7726ac32b570c.exe"1⤵PID:1932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 2082⤵
- Program crash
PID:2936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 2282⤵
- Program crash
PID:652
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1932 -ip 19321⤵PID:3148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 1932 -ip 19321⤵PID:1420