Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-04-2024 09:20
Static task
static1
Behavioral task
behavioral1
Sample
793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe
Resource
win11-20240412-en
General
-
Target
793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe
-
Size
420KB
-
MD5
80c7a1b74e30c09dd9196a875def47bc
-
SHA1
475e5c78dcfca78d55faad5d3243af95a0bfc384
-
SHA256
793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421
-
SHA512
24a0a94ef250b3aa5c443799103dfc07d616242d4935cf99a1374feea711edf0ebd4fb99264bb8e69263fd207e9078f8d752faf4e861580c310bbc3aa0e36b0a
-
SSDEEP
6144:faimi6wSBhpBVuLXjmtwlwYd3vQ8xxXh2IECc:faimi6wSBbYX5wYq8xOt
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4932 3856 WerFault.exe 793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe"C:\Users\Admin\AppData\Local\Temp\793837f29197681a2e6e6855f2fa481613f6c0cfffd584aac29b2a28f7035421.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3856 -s 12482⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3856 -ip 38561⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3856-1-0x00000000040E0000-0x00000000041E0000-memory.dmpFilesize
1024KB
-
memory/3856-2-0x0000000004890000-0x00000000048DB000-memory.dmpFilesize
300KB
-
memory/3856-3-0x0000000000400000-0x000000000405C000-memory.dmpFilesize
60.4MB
-
memory/3856-4-0x0000000004890000-0x00000000048DB000-memory.dmpFilesize
300KB