Analysis
-
max time kernel
134s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23/05/2024, 11:22
Static task
static1
Behavioral task
behavioral1
Sample
c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027.exe
Resource
win10v2004-20240426-en
General
-
Target
c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027.exe
-
Size
12.7MB
-
MD5
2617a323fb10a378da18f2c6ce7ccf0c
-
SHA1
11e7f6d1962a34b6e3ccbeed6a0e51c495b54d03
-
SHA256
c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027
-
SHA512
e2f298bf0052c05968422756dca2555e6d73002d358bdc1ccc06450ac74dc7197023292e5789e28cdc000f1a4d3cd0f850faa0908956e208914def1bb5fd6733
-
SSDEEP
196608:807lhv4+zaZK4DT81o3LAKmP0R/7pS2E5RV9BYb3mnSdK/zvwpyFl1v6psjLm:/7zxzaZKt1o3IP0RsLRVk4fFl1v6pQ
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4356 3188 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027.exe"C:\Users\Admin\AppData\Local\Temp\c099e4650ca3635313dc7d1c421edec8e7cdd19a6f89103ca429ba3d8cc69027.exe"1⤵PID:3188
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3188 -s 5322⤵
- Program crash
PID:4356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3188 -ip 31881⤵PID:468