Analysis
-
max time kernel
134s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 00:42
Static task
static1
Behavioral task
behavioral1
Sample
6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637.exe
Resource
win10v2004-20240426-en
General
-
Target
6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637.exe
-
Size
14KB
-
MD5
7061d2cb84fa4753a762f94ec755ba70
-
SHA1
3e41279495533caf82257e889e1dc3bb0e23f2ca
-
SHA256
6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637
-
SHA512
6e39a42296a0c72f971ee44ee93bf1ea1bf46429a593b42471388d3fd6220be9e504b44bee21e31ab9681e2b7ec7b91883aec76b7d790874924e1c2708b1246e
-
SSDEEP
384:U7L325gjLJQFyClkCLleVCB0wiaVseYxYakfkvEMDE045H:UP32cceVCUaVCxYJfsZA
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2632 3128 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637.exe"C:\Users\Admin\AppData\Local\Temp\6ea4da8070d6bb40566565b6595f061df716ac547c0f0845da963684bbd04637.exe"1⤵PID:3128
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3128 -s 2162⤵
- Program crash
PID:2632
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3128 -ip 31281⤵PID:464