Analysis
-
max time kernel
129s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:21
Static task
static1
Behavioral task
behavioral1
Sample
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
Resource
win10v2004-20240508-en
General
-
Target
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
-
Size
4.8MB
-
MD5
63f880de9b45fe6ff4d234e088879e71
-
SHA1
55146fb6b34652e3e6810911122997d276a82c5c
-
SHA256
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0
-
SHA512
f2bfda6fb31c193f290d76b72d6d1db40ee33b5b41786f3fefb1c73bb24223753b8abbb0f303608e4cbfe0e3c38db914957cb5dbab5ffca9a19e527e593a0863
-
SSDEEP
98304:R1nW5UuUxP8FH3VthPiG4b/wKhSCafTzsrM:e5sPYkG4jwcS6M
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 540 3192 WerFault.exe 2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe"C:\Users\Admin\AppData\Local\Temp\2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe"1⤵PID:3192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3192 -s 7522⤵
- Program crash
PID:540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3192 -ip 31921⤵PID:2976