Analysis
-
max time kernel
136s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 19:56
Static task
static1
Behavioral task
behavioral1
Sample
293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe
Resource
win10v2004-20240426-en
General
-
Target
293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe
-
Size
76KB
-
MD5
92f0601dbc4fec2482680c5747f7a85a
-
SHA1
52b721f1013d65bfcc21a9f6b033da8f3979f817
-
SHA256
293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36
-
SHA512
3516932cbf2f8a652dd1317a82f7279a2fc05c9691c76f0799eed821dd359234ce8d1cde9dd90cc5425432acc494f4d7f45780902154027128972f4f6f570f39
-
SSDEEP
1536:UK0vLzi3luM9sXwyu1cnjjl69e1OZs8IrZZjjvOnr8xnhYAxLtRPgCAU2+ty20Kj:6zbfzblHx
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1128 3956 WerFault.exe 293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe"C:\Users\Admin\AppData\Local\Temp\293e86aa5e162c883577b8c6e7fcb79da0d7c1d91c97b8dcfcea88f20e08bc36.exe"1⤵PID:3956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3956 -s 2162⤵
- Program crash
PID:1128
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3956 -ip 39561⤵PID:1400