Analysis
-
max time kernel
129s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 02:57
Static task
static1
Behavioral task
behavioral1
Sample
8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe
Resource
win10v2004-20240426-en
General
-
Target
8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe
-
Size
14KB
-
MD5
ee6efd162788fa22631e509dcc7dff17
-
SHA1
476c0862aa545a2bb98cbd6207954637933a2e91
-
SHA256
8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e
-
SHA512
d7d58f3b7f5333db3b4d4b7a10b9ca65f23c972f84b2b30677486400e99511ec20669c22b03702ca1a86345fdf6c62828ae175fcc718d7f5d44d734b1788b56b
-
SSDEEP
192:o15c+kod1p0HzhnOhjbAe2Do1EqxACIfVaLwVXe82YfkYHO7zqDE045HQThhh:5Q6HzKJLEOXWaLiX2QHJDE045Hghhh
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1888 3356 WerFault.exe 8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe"C:\Users\Admin\AppData\Local\Temp\8e77626b965452b1e74dd38cbcf637eecafe9f7cb687849325c2d74963e5128e.exe"1⤵PID:3356
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3356 -s 2242⤵
- Program crash
PID:1888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3356 -ip 33561⤵PID:880