Analysis
-
max time kernel
130s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 21:45
Static task
static1
Behavioral task
behavioral1
Sample
54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe
Resource
win10v2004-20240426-en
General
-
Target
54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe
-
Size
83KB
-
MD5
6f5a14561f5c54e835beac0a7c088544
-
SHA1
ac38aed31b6891d6eea9d084503e2e426b6d6357
-
SHA256
54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535
-
SHA512
35e4e5a3fa9a994b82cf85647daab1d6d69b8da9229980b222e5fd29dc744f8976b905d9a7afd8b497e94066a3a3610805fb2d30861355c3f8f7a67e2e566e82
-
SSDEEP
768:v8V96G1p334QYkfY+/JycW5ZcNV7kYtmwBrigH/n9ePg6XcjEo2+Of:hyvYkfY+JDnVZtnBX/n8PgNjyj
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3772 4020 WerFault.exe 54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe"C:\Users\Admin\AppData\Local\Temp\54538ca4f728eeb9f4d6a994d334e9302bb0482dfe8bb1ffe7ce432c9dc04535.exe"1⤵PID:4020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4020 -s 2162⤵
- Program crash
PID:3772
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4020 -ip 40201⤵PID:4784