Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 01:30
Static task
static1
Behavioral task
behavioral1
Sample
7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe
Resource
win10v2004-20240508-en
General
-
Target
7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe
-
Size
14KB
-
MD5
8e460bdd5e9b8e919faea92530c840ca
-
SHA1
841aea139fdac190347d49cd3108790e0e28bfa6
-
SHA256
7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b
-
SHA512
20bed90a416f2a019913aa7bbe8c06c226799b5532a54d45e2036fbade78833e5fed8f7c7abab78ad3c6365ad77547e36fe7e95f3998116136492ff4fb283f3d
-
SSDEEP
384:REwbPZzHdOT1hE3CkRJhW6EgmyDE045HNmmm:nPZ61hESkJhW6/moA
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1392 3908 WerFault.exe 7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe"C:\Users\Admin\AppData\Local\Temp\7a299ed923079eaa8a4e06e429be628bc5c388eec8ca8217dad7a53041a7624b.exe"1⤵PID:3908
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3908 -s 1762⤵
- Program crash
PID:1392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3908 -ip 39081⤵PID:4400