Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:01
Static task
static1
Behavioral task
behavioral1
Sample
9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe
Resource
win10v2004-20240508-en
General
-
Target
9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe
-
Size
66KB
-
MD5
ca9c1fcedfe39de2105c18478ceb2d68
-
SHA1
6f9ccab1e535234c7ae583c23005e35944223a5d
-
SHA256
9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab
-
SHA512
2f148cd8cabf26663baa143d3527e48221f9cd602ddece2b94e2b769a4454a9e7f50b095af3a3516a22697357b71375eb5c7a8e77d68536bdffc3c9ac19b9c7b
-
SSDEEP
384:C4mJImJg1EOC2lOhmzHC3/49CbU5XfnM83kqunkNCKuNlBVT:C4mJIKg1EO/ghmzG/8Cb8vMakPy+HVT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4384 1144 WerFault.exe 9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe"C:\Users\Admin\AppData\Local\Temp\9b9c1c40f9e9b1228e77cdbe837c03e818ec9e27a335a0a42eaec68f72a41eab.exe"1⤵PID:1144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1144 -s 2162⤵
- Program crash
PID:4384
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 1144 -ip 11441⤵PID:2584