Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240412-en -
resource tags
arch:x64arch:x86image:win11-20240412-enlocale:en-usos:windows11-21h2-x64system -
submitted
26/04/2024, 08:01
Static task
static1
Behavioral task
behavioral1
Sample
ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814.exe
Resource
win11-20240412-en
General
-
Target
ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814.exe
-
Size
352KB
-
MD5
e9cf2b85c3cd785b251de43861bbb06e
-
SHA1
0b69d1e73a1947b73ea50b1f3e951bc5a9e61ba5
-
SHA256
ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814
-
SHA512
1cf8a9d301aff48fa128d16ac3198f942586db38a9b1c59a36b9a0760e56a9d132a7f76fc2f70f33b4cbbc15f01abb971b52f92b7fbe038a5ba7c27e947d0101
-
SSDEEP
6144:HVHViN66w3D1D2cq9qeZ2T4teXP3HsjcDbkiHERh8nTr:1HViNjyFoqesT4te/cgXH+h8nTr
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3840 2060 WerFault.exe 78
Processes
-
C:\Users\Admin\AppData\Local\Temp\ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814.exe"C:\Users\Admin\AppData\Local\Temp\ada9f1952740e531941489dedf30d9308f3ad83fa92bfc5abc42e1e4450a4814.exe"1⤵PID:2060
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2060 -s 13122⤵
- Program crash
PID:3840
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2060 -ip 20601⤵PID:8