Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:21
Static task
static1
Behavioral task
behavioral1
Sample
a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe
Resource
win10v2004-20240426-en
General
-
Target
a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe
-
Size
171KB
-
MD5
d503cb1cd223fd13d7f002ed0a2559bf
-
SHA1
8f2e6099f43c7db810abce7ddffc6a55afe050db
-
SHA256
a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930
-
SHA512
16a5e7b07eb0ed18ab077baee4a6770588461da533b5a9136d6bb00e01766e73d2f39b2d4198417c3665efdadd81ebc50af43a7958382e844fadc52f78696854
-
SSDEEP
1536:Aq3vmG9hhy+Zfl7Z/0l3N2OLvLINHU+wfvxMx0lhqoY9ateo1Qg:AqJXd7Z/6AKLIRogobteEQ
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2260 512 WerFault.exe a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe"C:\Users\Admin\AppData\Local\Temp\a452ef976c509ec7d8b775f70df06cbdc40ac6dcc0d0099a214d8ab77f191930.exe"1⤵PID:512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 512 -s 1922⤵
- Program crash
PID:2260
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 512 -ip 5121⤵PID:3892