Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
23-04-2024 19:20
Static task
static1
Behavioral task
behavioral1
Sample
c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe
Resource
win11-20240412-en
General
-
Target
c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe
-
Size
408KB
-
MD5
2ff035b3d7ff5e1fba305664068eb8e5
-
SHA1
f6360e9455b9d837660816d73c7228070db2977a
-
SHA256
c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537
-
SHA512
1efd1e5511c3d654e724d5b822b40a3bb603818047bdf20dbcc0ad2a9744526d0ddc96c53dc6ab0d2a9847bf817d0664e29491367bad87c21bf0b8f1454bce05
-
SSDEEP
6144:7PxYgX4kPSyfTfd9jAV1XTnhjoBBPdyFFcsb4gt0fQii5KqbI:7PxYgX4kPSVhjor1Zbfa7E
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2124 4872 WerFault.exe c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe"C:\Users\Admin\AppData\Local\Temp\c2439747abb1d51a0f27c5d94c4150eed048858eb69a54c812280aa062d36537.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4872 -s 12842⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4872 -ip 48721⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4872-1-0x0000000004250000-0x0000000004350000-memory.dmpFilesize
1024KB
-
memory/4872-2-0x0000000004710000-0x000000000475B000-memory.dmpFilesize
300KB
-
memory/4872-3-0x0000000000400000-0x000000000405A000-memory.dmpFilesize
60.4MB
-
memory/4872-4-0x0000000004710000-0x000000000475B000-memory.dmpFilesize
300KB