Analysis
-
max time kernel
130s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 02:29
Static task
static1
Behavioral task
behavioral1
Sample
bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe
Resource
win10v2004-20240508-en
General
-
Target
bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe
-
Size
61KB
-
MD5
6f2e00968af4b9e5b34b93b00dd79c27
-
SHA1
3ab9a77565d598d90257f87e66d1dc2c7382d295
-
SHA256
bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e
-
SHA512
347e77b6b1310b0788b56cad8ead1b46b8197772896826d1b9fcff66d8b8d2bad24990f954801103e37027aed20e2042fd318a744cf0847a3918b5de89039e7a
-
SSDEEP
1536:ELIQMSoo+yrFedc5wH4MOwNqr/bV9Xmp/pl0s7L:EtMSoo+yJeW5wH4Mu9G/wM
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 4492 4964 WerFault.exe bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe"C:\Users\Admin\AppData\Local\Temp\bd2d478484d90219ca4f96439b33f2bfa64a128e7f476ed857693b29b3a4ee1e.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 2162⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4964 -ip 49641⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4964-0-0x0000000000660000-0x0000000000685489-memory.dmpFilesize
149KB