Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 22:34
Static task
static1
Behavioral task
behavioral1
Sample
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
Resource
win10v2004-20240426-en
General
-
Target
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
-
Size
14KB
-
MD5
3df63d9b161d60f5802d4ca8c91ed412
-
SHA1
535dbebe1f87806da63c9297ad0109fe7b7a8789
-
SHA256
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07
-
SHA512
b6796e570a93878bb70fc0d7477245be62b4b15dcd926d690d92fda8543616c007171c7a34e15f7fb67e2ea54df6119bd5084c3ab3bd66472bd44d0de0e20413
-
SSDEEP
384:L8Q30MKdWX8HSHSHSHSHSHSHSHSHSHSHSHSHSHSHSHX5TJYtyYDE045H:Lv3WdWsHSHSHSHSHSHSHSHSHSHSHSHSC
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5028 3224 WerFault.exe 64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe"C:\Users\Admin\AppData\Local\Temp\64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe"1⤵PID:3224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3224 -s 2162⤵
- Program crash
PID:5028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3224 -ip 32241⤵PID:5100