Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 18:19
Static task
static1
Behavioral task
behavioral1
Sample
06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe
Resource
win10v2004-20240426-en
General
-
Target
06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe
-
Size
14KB
-
MD5
a57c9574b7ea5014ded66d3270d71ef5
-
SHA1
143896db63461f9099f35dea6c0d71787684cb3f
-
SHA256
06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9
-
SHA512
6a8db91bfb3e9297937944a4661eda928a6340d3684f13c02b9e66f9df30381f7ceedaafe70232c5ade20bde7443122caeb99aaaf4a907a0113356475d2ae00d
-
SSDEEP
192:FOY2AbO7ZO1O5I39ye1eh9eWtttttttQu1u1u1u1u1H76/1poMRqDE045HQsYYY:JBbOlp5I3GREEEE5C1poDE045H
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2692 3224 WerFault.exe 06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe"C:\Users\Admin\AppData\Local\Temp\06609335740f36591d57de3a5fe5557807a56af5d1a07c8993883b709f1013b9.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3224 -s 2442⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3224 -ip 32241⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3224-0-0x0000000000400000-0x000000000040A000-memory.dmpFilesize
40KB