Analysis
-
max time kernel
133s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 19:02
Static task
static1
Behavioral task
behavioral1
Sample
17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe
Resource
win10v2004-20240508-en
General
-
Target
17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe
-
Size
76KB
-
MD5
2c790f689fffc6670ca7965a6b16d4df
-
SHA1
e26a1fafb8f3f6a651d78722380c586cb0cdfce3
-
SHA256
17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0
-
SHA512
73624a7f04e7f1f420393f1df6d4a45082982d28935a04cb6e39ddeef4c1ed74ad54f980d33f88947ff4c771020a7aecd3899d15b4d9d2c690fef46f523d4c64
-
SSDEEP
1536:+iI6q1Ds+I4O5+n6J44K5XTIoJgKa0qMax213IFjgyKH/tuL8c+H8SdS4:++aD+ixXaKa0qMW213IFEyKwL8L
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4496 720 WerFault.exe 17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe"C:\Users\Admin\AppData\Local\Temp\17efc945f78c140f7836acd0bc55e4cb26baf6a8091ee020e6dc73e0a60e52a0.exe"1⤵PID:720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 720 -s 2162⤵
- Program crash
PID:4496
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 720 -ip 7201⤵PID:2236