Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 22:12
Static task
static1
Behavioral task
behavioral1
Sample
5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe
Resource
win10v2004-20240508-en
General
-
Target
5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe
-
Size
14KB
-
MD5
ecb83a01d2f58a210305a68ef459c00e
-
SHA1
5151f7444a1a887bc7ecdc58f9685ec80e71a9a1
-
SHA256
5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8
-
SHA512
2650eccbc61e3b7ef502efaadd6b5fb089af9379869e5ffcc4f830132b9deb14fb03e81edda5a8a47d2927dc9312ea4c4041a836c9d88286f1e10172a93d7b98
-
SSDEEP
384:h3yuPDm4444444ixxxxxxxO88VUDE045H:hCN4444444zp4A
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1780 1484 WerFault.exe 5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe"C:\Users\Admin\AppData\Local\Temp\5d71bf5be2b2b0b5e76a798e5f47afdf903fdfc460fe8f166e9ec93fdc8ccec8.exe"1⤵PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1484 -s 2162⤵
- Program crash
PID:1780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1484 -ip 14841⤵PID:1468