Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:27
Static task
static1
Behavioral task
behavioral1
Sample
36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe
Resource
win10v2004-20240508-en
General
-
Target
36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe
-
Size
56KB
-
MD5
7cf460b7317a08e10b187486bb35f991
-
SHA1
2815808f46b53fda24f1d1b6824c808b43f6e49b
-
SHA256
36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767
-
SHA512
af8fc09c31ffc0f512752ee74ffaed5bc21cdc52e477549ab59b18112e1ecb55fbd3758232972e5ff1fbebebe58b6022e51b5c935b752dc4b9049446168d54c9
-
SSDEEP
768:q4uG7ZIedHxDZ3kdPrlfZo0oKIZHXirFedc4x3SwfwRnc4MF4wi8q08/bVkkB9X5:BzZAZoo+yrFedc5wH4MOwNqr/bV9Xmp
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4168 388 WerFault.exe 36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe"C:\Users\Admin\AppData\Local\Temp\36fd535c5e4f320b383a579b447418ee4168b1c0823a108011a6c08a75a91767.exe"1⤵PID:388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 388 -s 2162⤵
- Program crash
PID:4168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 388 -ip 3881⤵PID:3580