Analysis
-
max time kernel
132s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 22:38
Static task
static1
Behavioral task
behavioral1
Sample
db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe
Resource
win10v2004-20240426-en
General
-
Target
db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe
-
Size
10.0MB
-
MD5
a02a5e4482514a29195a4a4a43a44980
-
SHA1
622ec9962dec244327cf26da1f7d5af33aaa3744
-
SHA256
db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f
-
SHA512
dcaae9c2d194fd8d4b7a5d55273bf048a5d68cdf5b33444987b1a916af0aec5a92babf6341f0269d09d7c6aa91d8d73db19e24b5914f96d6e157c9d83cb6fa62
-
SSDEEP
196608:x5IGEqaD1X3ANRAFLSayFnE5ck3rbgwlZJj7PRVUL/4lgCu44KUJNoIIu:LfESNRAzsnxk3rbgGZJjLRVimNu4472M
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1020 3224 WerFault.exe db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe"C:\Users\Admin\AppData\Local\Temp\db3e9f5cc28df4c7c2b887a7984b4cc0ba7440fd4a8cb745f4a62b00fbd4334f.exe"1⤵PID:3224
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3224 -s 2242⤵
- Program crash
PID:1020
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3224 -ip 32241⤵PID:1928