Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
30/04/2024, 01:12
Static task
static1
Behavioral task
behavioral1
Sample
2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6.exe
Resource
win10v2004-20240426-en
General
-
Target
2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6.exe
-
Size
7KB
-
MD5
aaece4bfe9aef86a5af44fd1bd5d7b1b
-
SHA1
d63a4a7e3b68e232a45e5e6de6e3278063c5b050
-
SHA256
2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6
-
SHA512
82b8d722946e15bef644cbd993175c9eb9431510b4f3ca535f86e6d0487dfe7e2235487863be28cbcedecb78a39d3ff5ff4eee96953f2bf5440738065816e6a1
-
SSDEEP
96:20rTPtvMtydXyD/0aKfa+ad2NR489ool8qTpZM1sp1c/rGaUOIvzNt:pPlMUdiua+ad2Djoo5TpZMKczbUr
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5080 3052 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6.exe"C:\Users\Admin\AppData\Local\Temp\2db6938351d75fa88670ed1a48c27aaf326d4335dbdc966c7d03dfe630572df6.exe"1⤵PID:3052
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3052 -s 9922⤵
- Program crash
PID:5080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 3052 -ip 30521⤵PID:756