Analysis
-
max time kernel
91s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:43
Static task
static1
Behavioral task
behavioral1
Sample
ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe
Resource
win10v2004-20240508-en
General
-
Target
ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe
-
Size
320KB
-
MD5
0113c7a0d0ccf54e016a157ac96ab6da
-
SHA1
26af19fb38cbad6f4c4b1bdaaf2b8fcc3a685df9
-
SHA256
ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab
-
SHA512
e62cc4b6b9dfcd02646421f2ee7bbd9923e08b9c0e5bc92d89e9570373a624dd36adab331ab6590a093e42a7cd85439811b95f4ba40dfeb77e74b028e730c188
-
SSDEEP
6144:vuJ2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:mJ2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 3076 4852 WerFault.exe ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe"C:\Users\Admin\AppData\Local\Temp\ab839cbc57285ddf04cbe6ad743104f10d7dc811c5dea593f489c1d11b1ed6ab.exe"1⤵PID:4852
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4852 -s 2162⤵
- Program crash
PID:3076
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4852 -ip 48521⤵PID:4932