Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
20-04-2024 01:19
Static task
static1
Behavioral task
behavioral1
Sample
20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
Resource
win11-20240412-en
General
-
Target
20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
-
Size
491KB
-
MD5
d8fc7276d760a0a7ef156bf647278770
-
SHA1
f8fbcce5e14e995c63d95a0c6b053e5285af89cc
-
SHA256
20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97
-
SHA512
e7ea3ab7057d798ce9f6552a7464f73412e50112bff086f27ccbc5772f707e2bcfd369b7fa16d5ecb367bd04a1394ba0e4222b1837bb44217a3078634024fb19
-
SSDEEP
6144:zufxfplO83UuksOoMrvyB2rqdNHe1RPjFWVjbM60Ai2eMG7J3B0:PCUukOMrrqGPjobMBc5G7JW
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1036 3936 WerFault.exe 20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe"C:\Users\Admin\AppData\Local\Temp\20322575b9e0e59bb15261afeab2ab4e4dfc598ba0ed44d22f7b3831007b4a97.exe"1⤵PID:3936
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3936 -s 13282⤵
- Program crash
PID:1036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3936 -ip 39361⤵PID:1228
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3936-1-0x0000000001AE0000-0x0000000001BE0000-memory.dmpFilesize
1024KB
-
memory/3936-2-0x0000000003890000-0x00000000038DE000-memory.dmpFilesize
312KB
-
memory/3936-3-0x0000000000400000-0x0000000001A46000-memory.dmpFilesize
22.3MB
-
memory/3936-4-0x0000000000400000-0x0000000001A46000-memory.dmpFilesize
22.3MB
-
memory/3936-6-0x0000000003890000-0x00000000038DE000-memory.dmpFilesize
312KB