Analysis
-
max time kernel
134s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:01
Static task
static1
Behavioral task
behavioral1
Sample
2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe
Resource
win10v2004-20240508-en
General
-
Target
2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe
-
Size
14KB
-
MD5
dc70da545f36eb1ba246b6622d54b046
-
SHA1
81ff93dd5125396f956768d262eaa92cc3d88a4d
-
SHA256
2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5
-
SHA512
da501ed0a3d0ef9440152e2e295df7a77041134c1bac5a103d719e5219cf1095833c6bc168ff6477873e7b71d8b953b77f24660cb091bb74e7ce55e0f38bf2f2
-
SSDEEP
192:hobx9bKjQjOGy8kkkkkkkkkTUiF1H33maSsVNqDE045HQ6EmEmEmEm:hWbeQa31HmzsmDE045HbPPPP
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3184 2168 WerFault.exe 2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe"C:\Users\Admin\AppData\Local\Temp\2b4f72af1389e54749fced0bd60191407fcea571a21417b98ec81cefb545eeb5.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2168 -ip 21681⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2168-0-0x0000000000400000-0x000000000040A000-memory.dmpFilesize
40KB