Analysis
-
max time kernel
135s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 22:39
Static task
static1
Behavioral task
behavioral1
Sample
66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe
Resource
win10v2004-20240508-en
General
-
Target
66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe
-
Size
119KB
-
MD5
3aa1d3c73ece7aeed5d588ce05ce0562
-
SHA1
8cd0baba9c02bbe6e5dba170c2d0d2c848aac1cd
-
SHA256
66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67
-
SHA512
dbb70281bb048877d68135c95f85d0c64edc3f69f7f330931b269d79a68bc4d72d93561d12962d770e848622b3658e113c35d4a11ca74e3caf8b352caa766ec6
-
SSDEEP
768:l3y/I/x1jLm1FkNXL11QndeB+/SD1c7cniYs2sgALvv:pKY1andeB+S5tnCvv
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2904 1668 WerFault.exe 66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe"C:\Users\Admin\AppData\Local\Temp\66c2170fa21cf1f7537511d71b375cb1bba0b8b281f8e54e067f2fac8c93df67.exe"1⤵PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1668 -s 2162⤵
- Program crash
PID:2904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1668 -ip 16681⤵PID:5084