Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
20-04-2024 19:10
Static task
static1
Behavioral task
behavioral1
Sample
17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8.exe
Resource
win10v2004-20240412-en
General
-
Target
17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8.exe
-
Size
760KB
-
MD5
c44ae0e2eee3f020b98455301ba3df8b
-
SHA1
2093c82b666ae47666435bff5ab7af7f982ed330
-
SHA256
17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8
-
SHA512
6be04b13680b23c763d2f3da8e90512850318e347704814cf6e1fba2da7c5161638253a60ef37258b9b758e70c739efc9f330465792cd1066def2d0f1b577cfc
-
SSDEEP
6144:LHkgiPA6RUPrVjj+VPj92d62ASOwjUN3F+9KTV7ig5rVjj+VPj92d62ASOwj:liPSpIPj92aSOc8FHVpIPj92aSOc
Malware Config
Signatures
-
UPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/1080-1-0x0000000000400000-0x00000000004BE000-memory.dmp UPX -
Program crash 1 IoCs
pid pid_target Process procid_target 2032 1080 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8.exe"C:\Users\Admin\AppData\Local\Temp\17b8c2cfe20bdd79dcdfd0b27cbca540c01f650cde4567b6388b87ad43842be8.exe"1⤵PID:1080
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1080 -s 2162⤵
- Program crash
PID:2032
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1080 -ip 10801⤵PID:3660