Analysis
-
max time kernel
139s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
01/05/2024, 20:02
Static task
static1
Behavioral task
behavioral1
Sample
2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156.exe
Resource
win10v2004-20240419-en
General
-
Target
2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156.exe
-
Size
5KB
-
MD5
c813e0ec9a4d3bcf0092a4257de22c7d
-
SHA1
b9a17469e01bd97802a092f303543137380f19a6
-
SHA256
2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156
-
SHA512
bc635a7d1d97f335f72b23e980cb8ae1c36a5234470f559a4c095d24f509797bde50e5380cd794359e1d2e83330fcbba3cbbbf4186f49bf9664b717422120d26
-
SSDEEP
48:SDlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t2RuqSxp:4WLkFfNnOKYloIQ2pm2pbYSixE
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4384 1288 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156.exe"C:\Users\Admin\AppData\Local\Temp\2d6baf640bbfb9bdea9086cb6b21c58d4bd6a434fe85c60a4b86c46301d4c156.exe"1⤵PID:1288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1288 -s 2242⤵
- Program crash
PID:4384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 1288 -ip 12881⤵PID:2728