Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 22:45
Static task
static1
Behavioral task
behavioral1
Sample
69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe
Resource
win10v2004-20240508-en
General
-
Target
69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe
-
Size
56KB
-
MD5
540b3176f46d7ae4649b8bada34bc946
-
SHA1
ab3c04221676236c0f16828176b60361bb68dde2
-
SHA256
69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef
-
SHA512
1ae9fe633c6fda54a6d3c0de991512d0cad6d60babd0cbc553300b88194de117f444c2de87ec28d3df60a24db75a645c457317e25be57c1ef61b664442bde1ac
-
SSDEEP
384:eWuhGStFebkVz+FFyhiV/JNJKiPvKGxsgqHwwPl/:eWuMlkJuFYiVRNYiPi+nD+/
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3464 3608 WerFault.exe 69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe"C:\Users\Admin\AppData\Local\Temp\69221e06cbd6d48e0f583f7e00199cde4df4e68892235f845cc494807ddbb7ef.exe"1⤵PID:3608
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3608 -s 2162⤵
- Program crash
PID:3464
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3608 -ip 36081⤵PID:5108