Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
26/04/2024, 00:56
Static task
static1
Behavioral task
behavioral1
Sample
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
Resource
win11-20240412-en
General
-
Target
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe
-
Size
343KB
-
MD5
7f26737f63fcd5b7e2695f438e341075
-
SHA1
325092e21e3089979756be19047c44bc4d036dc6
-
SHA256
ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff
-
SHA512
8e169fdebec064a2a4cdda391dbb189f460e4e931597892ce2c44178cc93ea3a0f38d49761a770a5454cef6a1b626e99b4fbc89ad9f9a722af21320965d87a48
-
SSDEEP
6144:yYqGf1ePFElQITCi9mqJeioCyRcjm8GRSpEfJnusH10i:yY3+FEl6QboCGcK3txFV
Malware Config
Signatures
-
Program crash 3 IoCs
pid pid_target Process procid_target 2860 2112 WerFault.exe 78 3100 2112 WerFault.exe 78 844 2112 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe"C:\Users\Admin\AppData\Local\Temp\ba7b9fc2750021800299ae2473acdcc6f5bf93e391bebe5da3cd7959904980ff.exe"1⤵PID:2112
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 11602⤵
- Program crash
PID:2860
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 12442⤵
- Program crash
PID:3100
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2112 -s 12922⤵
- Program crash
PID:844
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2112 -ip 21121⤵PID:5056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 2112 -ip 21121⤵PID:1048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 516 -p 2112 -ip 21121⤵PID:3512