Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:28
Static task
static1
Behavioral task
behavioral1
Sample
bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe
Resource
win10v2004-20240426-en
General
-
Target
bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe
-
Size
119KB
-
MD5
8c65b7f8481a0f61dca08d63aa057a23
-
SHA1
63371a2764eb80d897b493f3c5151823f48de24c
-
SHA256
bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda
-
SHA512
4adaf3794d8eb112adfdfb04041a4263776336aa1b47698cdb81a0b758673f5bf12eeca424855499a3f8cb27d96888669ba86b42c4e0def038c579e37c0be1bc
-
SSDEEP
1536:o45F1YPlFX+S5tnCvveJY45F1YPlFX+pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:ovF/nCOJYvF0Hwo8soECAKzAde
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1420 3012 WerFault.exe bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe"C:\Users\Admin\AppData\Local\Temp\bcd64bafc8b1fb5a2893fe2a074c335d65fb5017222ec80e86521141b2bcdcda.exe"1⤵PID:3012
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3012 -s 1842⤵
- Program crash
PID:1420
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3012 -ip 30121⤵PID:1764