Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
20-04-2024 21:20
Static task
static1
Behavioral task
behavioral1
Sample
87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe
Resource
win11-20240412-en
General
-
Target
87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe
-
Size
398KB
-
MD5
43564bc9b7d3525a8b7b39bf99990146
-
SHA1
0ae67b0b98a915f933bebb4d5c143fca7b1e39d0
-
SHA256
87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f
-
SHA512
5764e1338efc55d371fe81c65e236c0a96df3521702aae49471e483496133b2aac0135cc628c8bae1761f9e1107a1de26b1f6b1eefe0cecf497df5a4cbc94e21
-
SSDEEP
6144:ZjDyU/DQxr5T8Zu5RWr0fGlSM/Ubp6UJT3Dv:9DyU2lTCuY0+wM/UnJTTv
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 2408 2200 WerFault.exe 87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe 2244 2200 WerFault.exe 87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe"C:\Users\Admin\AppData\Local\Temp\87f86c46da065ae7b74da61ceedd47e8cc80a5847dbfbb1b8cc9c113c82ba00f.exe"1⤵PID:2200
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 13922⤵
- Program crash
PID:2408 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2200 -s 14242⤵
- Program crash
PID:2244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2200 -ip 22001⤵PID:1648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 2200 -ip 22001⤵PID:3360
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2200-1-0x0000000001C60000-0x0000000001D60000-memory.dmpFilesize
1024KB
-
memory/2200-2-0x0000000003880000-0x00000000038CE000-memory.dmpFilesize
312KB
-
memory/2200-3-0x0000000000400000-0x0000000001A2E000-memory.dmpFilesize
22.2MB
-
memory/2200-4-0x0000000000400000-0x0000000001A2E000-memory.dmpFilesize
22.2MB
-
memory/2200-5-0x0000000003880000-0x00000000038CE000-memory.dmpFilesize
312KB