Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:38
Static task
static1
Behavioral task
behavioral1
Sample
aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe
Resource
win10v2004-20240508-en
General
-
Target
aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe
-
Size
4.8MB
-
MD5
6a1c633150b9ddc7454274c37425356b
-
SHA1
efa850d5f97222db17922ed9968c3ddd5902c48a
-
SHA256
aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c
-
SHA512
c698c050c65fabe7ab6ba7d36700df432c1465537618e796f8d3c59db007b0bd73ac1663bee3213f3d0b01ace7b382f9d861ddfcc4babf814cf42dfe60c428b7
-
SSDEEP
49152:25grItb5R9C3Jp0J1a/HVIlsILdSMz0xXhmg1yQnTRbeRZgCHI9qhRNjSRv7nZe:25rtt65+JqlILdBWxF9iqqhRNaZe
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2544 3392 WerFault.exe aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe"C:\Users\Admin\AppData\Local\Temp\aa1313df84438521bf5e60998e713d012dac50eb5e2f47c3ddb58406836fae6c.exe"1⤵PID:3392
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3392 -s 3362⤵
- Program crash
PID:2544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3392 -ip 33921⤵PID:208