Analysis
-
max time kernel
97s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10-05-2024 22:21
Static task
static1
Behavioral task
behavioral1
Sample
6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e.exe
Resource
win10v2004-20240508-en
General
-
Target
6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e.exe
-
Size
14KB
-
MD5
18304b4794ba5378d81253751f49ed9a
-
SHA1
588bfbab65ecd8c6294a01f0935d81d2a51f2347
-
SHA256
6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e
-
SHA512
cdaf820ce0f718cd0fde3314bb5385f3cf0fab314db8ec4c506b5c5211a660b7147e03ccc31662769b2dc83ef383d6f8936658951a281af02bd41944f48d13fb
-
SSDEEP
384:dXVwNjSNrHLiCm1rjyrQzwPUfL+wmoDE045HDcccc:vwNONrmC4yrQ8PinlApcccc
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3384 2436 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e.exe"C:\Users\Admin\AppData\Local\Temp\6856b34634bead34dc70b7a9cfd17dbff33b72ebc348f2b98ed2c061a6590e1e.exe"1⤵PID:2436
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2436 -s 2242⤵
- Program crash
PID:3384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 2436 -ip 24361⤵PID:3980