Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 19:30
Static task
static1
Behavioral task
behavioral1
Sample
203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804.exe
Resource
win10v2004-20240508-en
General
-
Target
203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804.exe
-
Size
320KB
-
MD5
9902a0dac0c28328e68309e9e3b00276
-
SHA1
8f4849325ccd8648d1a54645fdc847a931d3d95e
-
SHA256
203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804
-
SHA512
5ddb2d31b3cb36d9404c0238696898525bb0efe47c8f4412d200dca9350bcfbc6a3f160247d01608ec117584f4c360363dd5aa109e3b422649506583409c0d6c
-
SSDEEP
6144:H2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:H2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2376 4300 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804.exe"C:\Users\Admin\AppData\Local\Temp\203de3f024abfe7ee3556c0f07170311d2af1984d2dd57f26210b57a72149804.exe"1⤵PID:4300
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4300 -s 2162⤵
- Program crash
PID:2376
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4300 -ip 43001⤵PID:3248