Analysis
-
max time kernel
132s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
21-05-2024 19:47
Static task
static1
Behavioral task
behavioral1
Sample
23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe
Resource
win10v2004-20240426-en
General
-
Target
23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe
-
Size
14KB
-
MD5
3f3cb0aa21b9073b51f29db39753042b
-
SHA1
64199b9924c0a0836b2b9dcc520e68813faf96b7
-
SHA256
23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f
-
SHA512
e07295dcbc5041c416f0be69eeb97fc5878cd12f29f992a73b64a3bcf46d2a3adf3a82d7fcb5fdb2fa0f0a500309c68f08b2b6043493e835daad7c6118ac731d
-
SSDEEP
384:zWEovJTzJ4+NEddddddddddddddd3sCQ0tMDE045H:KJTGNddddddddddddddd3sC32A
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1104 3848 WerFault.exe 23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe"C:\Users\Admin\AppData\Local\Temp\23da60f147346d917bdf7c7eb8a37326148b25d3d6f6c7497eda81ac2bbb220f.exe"1⤵PID:3848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3848 -s 2242⤵
- Program crash
PID:1104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3848 -ip 38481⤵PID:4492