Analysis
-
max time kernel
131s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:24
Static task
static1
Behavioral task
behavioral1
Sample
a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe
Resource
win10v2004-20240508-en
General
-
Target
a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe
-
Size
320KB
-
MD5
359207a9f2c31dfddc4ec3458b9e02f7
-
SHA1
b0158868986853073d97b10caff7cdbb99604f61
-
SHA256
a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630
-
SHA512
09d51bdfacf36589da43bcfda36874679fc07cda6a24c63c14cae1ebd85a631178238bed389f544791eb82cda12b2c575c8e62cdca14a703581ff7884a34669d
-
SSDEEP
6144:e2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:e2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1668 5012 WerFault.exe a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe"C:\Users\Admin\AppData\Local\Temp\a5b9cbfe6867150116770adc2d9fb220a43206b41b07ecb9c98673831366c630.exe"1⤵PID:5012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5012 -s 2162⤵
- Program crash
PID:1668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5012 -ip 50121⤵PID:3284