Analysis
-
max time kernel
129s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 20:52
Static task
static1
Behavioral task
behavioral1
Sample
38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe
Resource
win10v2004-20240426-en
General
-
Target
38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe
-
Size
14KB
-
MD5
0321eb6294884c9cae92764541df40f0
-
SHA1
5cede6c0950e06718510d9acf6abb317151a66e7
-
SHA256
38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034
-
SHA512
c74f31aa0ef466d55cbcdfe410d6520fe0d41a8431f6ab2b07b2bd18b8525914d78bfbe798ea73a70199c82e93212ac44f050a248d6e97d36f826ddc1318dd1e
-
SSDEEP
384:7szefjhqUTCM4V1la2SaC8Y5G3vpDE045H:+AjBTCMKahd9G3BA
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1696 4152 WerFault.exe 38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe"C:\Users\Admin\AppData\Local\Temp\38b065c47d71f76f0d2ecd60475bab1768797ea38209d99e7a5550fc84bc2034.exe"1⤵PID:4152
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4152 -s 2122⤵
- Program crash
PID:1696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4152 -ip 41521⤵PID:3568