Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 00:55
Static task
static1
Behavioral task
behavioral1
Sample
981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe
Resource
win10v2004-20240508-en
General
-
Target
981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe
-
Size
119KB
-
MD5
1d1520bbc9070e59c53c8f43a34d5c19
-
SHA1
ebb8a32edd430dcf6ef68b2a8bfddccaa8819911
-
SHA256
981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef
-
SHA512
4be3520db4f0ba7dfe6a8f5a1c8e0a83c99d49af688d32613a90d67087e44f71510d99fbd25f5b2817a767d62e751ef46d61ee4755bcae3b302aa4d21c0178ca
-
SSDEEP
768:Zd045k1LQ0wRoDmF2+yzBJDEQWelSiw+/SD1c7cniYs2sgALvv:n48mwiw+S5tnCvv
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3576 600 WerFault.exe 981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe"C:\Users\Admin\AppData\Local\Temp\981d1f6a837a2cb07c284aff4dc212e72df6806c1b8ecc61fc2d50ce030a1bef.exe"1⤵PID:600
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 600 -s 1922⤵
- Program crash
PID:3576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 600 -ip 6001⤵PID:4072