Analysis
-
max time kernel
67s -
max time network
61s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
29-04-2024 01:40
Static task
static1
Behavioral task
behavioral1
Sample
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe
Resource
win10v2004-20240419-en
General
-
Target
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe
-
Size
419KB
-
MD5
27bdf1a30740d66ac16cb2924842fc4c
-
SHA1
bf5f648b4b4a1a928b0f38ea21800cba55fab626
-
SHA256
bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580
-
SHA512
afe92674a427ddc2a89630499cfce84effe57c9dbfa710ec3f3ea9ec1064a2d00c52177e4bd09e64d1e4248c57f9492a99bfbe4a82b85679fb0323ff3fb3aaf0
-
SSDEEP
6144:JWigHbPbnW5OdaZLB+zKwTTfRLpEGzYSIpB5Apy3E6Y:JZ2zzsZN+JTTlptIp7AIU6Y
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2092 3168 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe"C:\Users\Admin\AppData\Local\Temp\bba5742cbd5e620ae6206dd33bd7d6669b8ba1406f36eeb3ba4fa13ff1f13580.exe"1⤵PID:3168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3168 -s 6962⤵
- Program crash
PID:2092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3168 -ip 31681⤵PID:1924