Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
10/05/2024, 22:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target 68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674.exe
- Size 14KB
- Sample240510-1923fsfh63
- SHA256 68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674
- MD5 30d6d4342d170a41154d75ccd253c5ae
- SHA1 1d52f749b8b22b46dca280af15b316b0b58b51b5
- SHA512 fa7eb8aa0f7d3546c5a4b671b3b02733d38811e44c3587cc252f6c98c71ad66b4ee9caa1d0958552acbd3f83f14c131a34b86680fbb5405376a2723d45ee3f05
- SSDEEP 384:onDRyhdi44DjVX7b2b2b2b2b+zEGW25DVDE045H:UU34HB76666Szvn5VA
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 1808 3076 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674.exe"C:\Users\Admin\AppData\Local\Temp\68688856519de57ffcdf9ad258f5b359bad16ed03ecdb679c1c538de191b3674.exe"1⤵PID:3076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3076 -s 2442⤵
- Program crash
PID:1808
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3076 -ip 30761⤵PID:4660