Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 02:33
Static task
static1
Behavioral task
behavioral1
Sample
ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe
Resource
win10v2004-20240508-en
General
-
Target
ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe
-
Size
2.2MB
-
MD5
815968c1e37397cea2bdb59e495302e5
-
SHA1
5685534a64708ff79755b6567fb144f97582fbbe
-
SHA256
ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15
-
SHA512
b8ebc84c5165008161aa7aec8671754cac116f8d15e8fda087ed63b67dc75b0b4e40d76b4aba3d53a150f18ed1c3bdd00f7f1bc669533ee25cb9e630a9b37c95
-
SSDEEP
24576:Jkpxqh7TXAQAbg82Xbvue836blvPuA9xG0bTd2jBx024soFgXEqXw04Xw+z9jVQw:y0hXA282XKeCuiJ4soFgXEqXw0GV
Malware Config
Signatures
-
Program crash 2 IoCs
Processes:
WerFault.exeWerFault.exepid pid_target process target process 2536 2652 WerFault.exe ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe 1484 2652 WerFault.exe ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe"C:\Users\Admin\AppData\Local\Temp\ec24689dff54fe437fd554ea768f8dab33e6b448a8ddcf6b7aedd079ca435a15.exe"1⤵PID:2652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2652 -s 2122⤵
- Program crash
PID:2536 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2652 -s 2882⤵
- Program crash
PID:1484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2652 -ip 26521⤵PID:4916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2652 -ip 26521⤵PID:4568