Analysis
-
max time kernel
149s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:09
Static task
static1
Behavioral task
behavioral1
Sample
b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe
Resource
win10v2004-20240508-en
General
-
Target
b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe
-
Size
91KB
-
MD5
48c51cbbe60f82dab44d02ac6da70cb2
-
SHA1
765d16295e5a8f03fc8fb5b9fe9b93854fca1c1a
-
SHA256
b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a
-
SHA512
fa93ee8a28984d4cc6b1b20a6015000e04fa9eac85633e61b944925da268c89e3f4056388e2c8d7ce3fb68da2c7f5b3bf51e0882aa15fe18019d8021364dd634
-
SSDEEP
768:+GS8PzQ9+m7o56h+AF8Ntuvbno+/Sf5szbCgUpuSLzJ:+WPch7Vo6Do+Y6bk9LF
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 448 2816 WerFault.exe b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe"C:\Users\Admin\AppData\Local\Temp\b4f73510eb796dafb9d70684337262dd0ed743c45ec600d5e36edd5ad130a09a.exe"1⤵PID:2816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2816 -s 1922⤵
- Program crash
PID:448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2816 -ip 28161⤵PID:3260