Analysis
-
max time kernel
113s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
21-04-2024 04:20
Static task
static1
Behavioral task
behavioral1
Sample
ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e.exe
Resource
win10v2004-20240226-en
General
-
Target
ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e.exe
-
Size
336KB
-
MD5
7e74488cbfc49c0c7bc44d1267f36242
-
SHA1
8ee411e1f34acfab88e77e9a3dc21f385d1d36c2
-
SHA256
ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e
-
SHA512
d6f09b84b319febfb4012ba2bb6e1853fb397a78bdac8b209e4e2ea0f74fca688f86f28491818a8556cbceff2cec712d818fcd0e4298a67e26be4cd358fa8c8f
-
SSDEEP
6144:mI0Ibcg48HwB4XPhEjEuLRcPOQZnW3I40hTB47B/a6p:F0IF4swB4XPhinRcL43Yhe/a6p
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4456 2148 WerFault.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e.exe"C:\Users\Admin\AppData\Local\Temp\ed258fab2d66d0d6e37b6239cac18d06f47ae7d5d399e03207882fdd48249f6e.exe"1⤵PID:2148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 4402⤵
- Program crash
PID:4456
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2148 -ip 21481⤵PID:4836
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3692 --field-trial-handle=2244,i,11878111470816612087,2265290141962607370,262144 --variations-seed-version /prefetch:81⤵PID:3772