Analysis
-
max time kernel
143s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:42
Static task
static1
Behavioral task
behavioral1
Sample
3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe
Resource
win10v2004-20240426-en
General
-
Target
3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe
-
Size
14KB
-
MD5
7700f04d8895e31c9274950bac4d48e1
-
SHA1
03f4f8c39a8a8bb9d7633b6afc0431efc494e978
-
SHA256
3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219
-
SHA512
1d055ed43d5ad0c548458270ca131601d1d9d1ba27ea7412cce20bb826c1544e1609f5fcb610b41afd5fbe07f80a716af7d001fb1f29648d47c931b81385f1de
-
SSDEEP
192:kpV30feyni1y8B8z4OLOxM97adqDE045HQ7mFNmFNmFNmFNm:kvRyniM7z4SOxg7pDE045HTFEFEFEFE
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 456 1392 WerFault.exe 3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe"C:\Users\Admin\AppData\Local\Temp\3c17e3bda1ee0da892bb5144ae7617f5d2c1c43255faa71c24708d12e93d4219.exe"1⤵PID:1392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1392 -s 2162⤵
- Program crash
PID:456
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1392 -ip 13921⤵PID:2976