Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
18/04/2024, 21:25
Static task
static1
Behavioral task
behavioral1
Sample
485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab.exe
Resource
win10v2004-20240412-en
General
-
Target
485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab.exe
-
Size
14KB
-
MD5
3926747d2b76de94b36ef0e742039eea
-
SHA1
12921e6bfda09931f5f70a960e0733e854f330fc
-
SHA256
485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab
-
SHA512
b1f297951b974e5e07dd42047438d72c626cd05d5a1311022fb89026e4681501d6ee36d0e56e09dc6d403935912c4fdcabc7ee327f148cff4e86fc4c8bdd4192
-
SSDEEP
384:+AUDdcD/Xqt/hDRSUqv4J61dBucH/pd7DE045Hn9K9K9K9:+hcD/atpDRg1bZH/PnAnAAA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3584 324 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab.exe"C:\Users\Admin\AppData\Local\Temp\485d6cff3d2eea367ff74e3e262daf0153bd4cfb5ba806e8abe66ece022e53ab.exe"1⤵PID:324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 324 -s 2442⤵
- Program crash
PID:3584
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 324 -ip 3241⤵PID:3080