Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
20/04/2024, 21:55
Static task
static1
Behavioral task
behavioral1
Sample
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe
Resource
win10v2004-20240412-en
General
-
Target
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe
-
Size
344KB
-
MD5
bb0148ae3ab981ce85c06ae18701041f
-
SHA1
b08f5a683be6214fc068f69a7a86beeaea7c93f4
-
SHA256
4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1
-
SHA512
ac2ae26dd26f2bef71377d9e87f0a7aa065af094eed299c0af8aea910d93791a6ea04ae3fe0949bd2f91214eae2fd55da738a3a7fb3909ead81f16035a31a1e8
-
SSDEEP
6144:9sJXJdGHoou+LPK1ZS7fREWBu0hqQP618djkta+rcUbnWa+FIpaZOvTL6USA0cwp:IZ8Hoou+LS1ZUBBu0hqQNOSFIpZqUA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3544 792 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe"C:\Users\Admin\AppData\Local\Temp\4e474770c2f952e8627b6d868197921d73fecbc0eace080f93993d6ffd332fd1.exe"1⤵PID:792
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 792 -s 7922⤵
- Program crash
PID:3544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 792 -ip 7921⤵PID:4028