Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 23:39
Static task
static1
Behavioral task
behavioral1
Sample
59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe
Resource
win10v2004-20240426-en
General
-
Target
59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe
-
Size
14KB
-
MD5
067f52b306ffe7557cfb774d4d0e4ad0
-
SHA1
aea0449410242d79a0549ff209881c4ec12c59b3
-
SHA256
59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621
-
SHA512
d9910a2776f059f6f4d6e88991cc76961c14b58376d4b06af434f8f0742bde648f305fe262df6f0e3c06c5f5fb5a550bb3a4491d86b05da8adcf769546592a7f
-
SSDEEP
384:9MGL9vSd9zRurb8WYDvYJO/SIYDE045H:9MwKd9zRurb8WYDQJKtiA
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5000 244 WerFault.exe 59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe"C:\Users\Admin\AppData\Local\Temp\59c38127184a3919a113ca4d54f53ff7b6b2ab6fe1272054531c844387ea9621.exe"1⤵PID:244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 244 -s 2242⤵
- Program crash
PID:5000
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 244 -ip 2441⤵PID:1428