Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
29-04-2024 09:34
Static task
static1
Behavioral task
behavioral1
Sample
ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral2
Sample
ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe
Resource
win11-20240419-en
General
-
Target
ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe
-
Size
347KB
-
MD5
74aae7906e0858c739b1049580208708
-
SHA1
4971a426160bd7a9f6f2cb456942ef7ee2d6e9e6
-
SHA256
ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30
-
SHA512
e778f6415cc2ab1e3500f1a74792df04b4766fe16f79cf2f096dda6bd2ff5b3034fdc71d8bddca801a13fb8152b92c1224de3b699d7968690a1320bd3b768487
-
SSDEEP
6144:aGNJdD4C4xkIsmIqLoSj9hXc6+Bl7+sysO+ThbGlN50BdYjFq:d5a+IsmhoSZG5lysynD50Hb
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4472 3452 WerFault.exe ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe"C:\Users\Admin\AppData\Local\Temp\ba1a9e5ae3d0ce791e8e47d17c7598c822966e8322ab259b1b39cc66c7e3ac30.exe"1⤵PID:3452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3452 -s 7202⤵
- Program crash
PID:4472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3452 -ip 34521⤵PID:2616