Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
21-04-2024 00:30
Static task
static1
Behavioral task
behavioral1
Sample
90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f.exe
Resource
win10v2004-20240412-en
General
-
Target
90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f.exe
-
Size
14KB
-
MD5
4d705364574523aab19714afe75c300e
-
SHA1
2716aef8f06b058996e357e99ba98417132de094
-
SHA256
90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f
-
SHA512
aa5905c7e4e53991836d7d02c001e2954a5d20265c8466de84e97327513ec888bf45c1d8008e992a460c216d32cdf8c8269899e92442c49721af70bfc54e7eed
-
SSDEEP
384:QscQG0DciHTgWwbhuHiWex8Rx6AM0cPhGKxHxPeEDE045H:TcQTjkxtU3eqRUbAKxH0eA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3372 4920 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f.exe"C:\Users\Admin\AppData\Local\Temp\90008cc8675129d22542bb25681071d96d78f49a7915a62867090c8b6cf0a94f.exe"1⤵PID:4920
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4920 -s 2122⤵
- Program crash
PID:3372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4920 -ip 49201⤵PID:1204