Analysis
-
max time kernel
135s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:52
Static task
static1
Behavioral task
behavioral1
Sample
3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe
Resource
win10v2004-20240508-en
General
-
Target
3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe
-
Size
270KB
-
MD5
aa3d7919823912668f4befc3412b290e
-
SHA1
c5bd5b34da45859536f93f608597c1c881635e08
-
SHA256
3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194
-
SHA512
55a26343570fca8088444a84fae3bd9910c69d9138e9395bd8bbdea4f85f542f7e0ae29f5e8107e26f41d35d388e7483aff1a41e35be567f5350bf015533e542
-
SSDEEP
6144:nzt4qRUF9aD4fY/RuDqPk3wBWgr4lsIY+qIF1AoWE7uCePK8YzSUF5fpfQBHTW9E:nWqRW9sKok3wBWgr4lzY+qIF1GEKC0R7
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4104 2012 WerFault.exe 3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe"C:\Users\Admin\AppData\Local\Temp\3ef40b5cf78b87606cb6d32e3f4fc1704145de07e54140954c68365be9b75194.exe"1⤵PID:2012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2012 -s 2242⤵
- Program crash
PID:4104
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2012 -ip 20121⤵PID:2092