Analysis
-
max time kernel
140s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22/05/2024, 09:19
Static task
static1
Behavioral task
behavioral1
Sample
e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530.exe
Resource
win10v2004-20240508-en
General
-
Target
e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530.exe
-
Size
14KB
-
MD5
fa5a148d5f0953fd1135cb5335739b3f
-
SHA1
25295e439844201e144e6cd415a1fb10f1f182db
-
SHA256
e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530
-
SHA512
d3af40d6b7dcee303a45f2c0dfcabc8804d0df388697056c194e524443a68141a4564cb8202a7ab88f0d0be84d5fc25bc51253439f9db4e757640c11df70e71b
-
SSDEEP
192:xwCPQ+k5VJmt4TITGrUvSPLGwINpmQw96EflMTnnNBevRONqDE045HQlpppp:xwFBFhIiYvQPQw9pKnNwDE045HOpppp
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4568 1848 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530.exe"C:\Users\Admin\AppData\Local\Temp\e6cd4b4a1c320c1fcaa53262a098b04b5466b26911df2caeea87501f7023c530.exe"1⤵PID:1848
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1848 -s 2122⤵
- Program crash
PID:4568
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1848 -ip 18481⤵PID:244