Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:37
Static task
static1
Behavioral task
behavioral1
Sample
aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe
Resource
win10v2004-20240508-en
General
-
Target
aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe
-
Size
320KB
-
MD5
792986e55c725a8b3760e23210143194
-
SHA1
3dde2fc3f0d985a757171293a06d9dbfb4fb0d7f
-
SHA256
aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365
-
SHA512
f9fcb208c7f5275537cfa672d05a4718f4a735286b2ee74d8e9072f737b450e551d19eaa6021ecac32dcf3c80515701db323cc500f582a099653ca11f1b1046a
-
SSDEEP
6144:Wl2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:W2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 5024 3320 WerFault.exe aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe"C:\Users\Admin\AppData\Local\Temp\aa0e37dc27bcd9b1a05b13948317e503f456d37f8fa597746c1a694d7a23e365.exe"1⤵PID:3320
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3320 -s 2162⤵
- Program crash
PID:5024
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3320 -ip 33201⤵PID:2296