Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:52
Static task
static1
Behavioral task
behavioral1
Sample
ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
Resource
win10v2004-20240426-en
General
-
Target
ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
-
Size
35KB
-
MD5
f2caef925db690f60f4427ee6d724b14
-
SHA1
0a43e47d2357139093dd04e222726466d909e3c5
-
SHA256
ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47
-
SHA512
1fef2b9f4822a1299207fbf597eba41e029d62e7a23428f23480db20cb4e58a5d09136f756b9cfc8b1faae9602d2c788401cd4a8baf3e3b7d6ebde0ea8e03618
-
SSDEEP
768:yObRtFB4KhRvzGdgpH8tyfiQeOPRz2LWUMZX/8q:9dvxVLd8tuXeOZaLZgEq
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2432 3640 WerFault.exe ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe"C:\Users\Admin\AppData\Local\Temp\ae84a520608f63f40dea16948082a967835ee1321c3571ac90976588faedad47.exe"1⤵PID:3640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 2642⤵
- Program crash
PID:2432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3640 -ip 36401⤵PID:3580