Analysis
-
max time kernel
133s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 18:53
Static task
static1
Behavioral task
behavioral1
Sample
134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe
Resource
win10v2004-20240508-en
General
-
Target
134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe
-
Size
320KB
-
MD5
68e9a106d4a5b14b88eba145524e61a2
-
SHA1
f61fef9ac901d0974ae60b9ce7dbb155221dccf4
-
SHA256
134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774
-
SHA512
5d80cd8656762a240c2ee1ad68c372d33553e56b54fb6dccb06a848a6b9d09576d9d54a2f0f28115e4da68a4b8990590ba62b7d4f4792452a02030dffd62a7d6
-
SSDEEP
6144:Vj2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:Vj2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2572 2256 WerFault.exe 134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe"C:\Users\Admin\AppData\Local\Temp\134201405fb627203f09999dc359df248eba5c63a7fa3bc1224bd8b915323774.exe"1⤵PID:2256
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2256 -s 2162⤵
- Program crash
PID:2572
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2256 -ip 22561⤵PID:2600