Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
09/05/2024, 02:31
Static task
static1
Behavioral task
behavioral1
Sample
a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3.exe
Resource
win10v2004-20240508-en
General
-
Target
a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3.exe
-
Size
555KB
-
MD5
40a364874342fed37faf47bc3a5eee0b
-
SHA1
b034a2796998edb5f3714ce3defea890e26d5726
-
SHA256
a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3
-
SHA512
e395fa5fa01a54f69f1af7123b50657eeffbf11aba134dd837383831a76bb4ea1e8e0d39c464e43bcd9d8f50e27b541e703759bf615bbd8322c028bd7325d45f
-
SSDEEP
3072:wCaoAs101Pol0xPTM7mRCAdJSSxPUkl3V5MQTCk/dN92sdNhavtrVdewnAx3wmVl:wqDAwl0xPTMiR9JSSxPUK1dodHsB
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2296 4700 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3.exe"C:\Users\Admin\AppData\Local\Temp\a9fa4351aa8b585892e5906b0440daebde4b93831b75dde434fd5aea1f1ac0e3.exe"1⤵PID:4700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4700 -s 2242⤵
- Program crash
PID:2296
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4700 -ip 47001⤵PID:2412