Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
24/04/2024, 00:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
041f063fba088d4fb8a74d4a624b076e.bin.exe
Resource
win7-20240220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
041f063fba088d4fb8a74d4a624b076e.bin.exe
Resource
win10v2004-20240412-en
1 signatures
150 seconds
General
- Target 041f063fba088d4fb8a74d4a624b076e.bin.exe
- Size 47KB
- Sample240424-aygn9sdb2w
- SHA256 5013e1d8951c06ab4fb3d364ce11d319922f26a616be9e2ade3ecb82ecfad817
- MD5 041f063fba088d4fb8a74d4a624b076e
- SHA1 cae01cbe33603365b7bba18b5d28d1fb99840f31
- SHA512 d4bd50d9507c2a2e3fd7b454b904d0c315cc717e290de09a6cb492d1d85b90ead470139ef67e00ec335bfdf816d1b62108a6516442032ba56b9da4fec903dc10
- SSDEEP 768:4MY6XvuyW9EJLJdfDQmJrDdpQwbespl+IBnv9kTDQ4sQFoZg5DzNb8Q8Eu2OFBEi:4MY6vuUVfDQO9pB9/BnVkTJmgxlgEnO3
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 2432 4868 WerFault.exe 85 4836 4868 WerFault.exe 85
Processes
-
C:\Users\Admin\AppData\Local\Temp\041f063fba088d4fb8a74d4a624b076e.bin.exe"C:\Users\Admin\AppData\Local\Temp\041f063fba088d4fb8a74d4a624b076e.bin.exe"1⤵PID:4868
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 2202⤵
- Program crash
PID:2432
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4868 -s 2242⤵
- Program crash
PID:4836
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4868 -ip 48681⤵PID:3576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4868 -ip 48681⤵PID:3108