Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2024 18:33
Behavioral task
behavioral1
Sample
4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
Resource
win10v2004-20240508-en
General
-
Target
4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
-
Size
368KB
-
MD5
a828a215b29ebde1d8119809676ae4bb
-
SHA1
b857dc17fb76ab84afdd042770dcbd7f062ba4ad
-
SHA256
4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c
-
SHA512
e5ee58451cb4075dc11506e938265c96f3e46fa963f820d8d8002fe6c255939a0b06d65aa1bd0277719ed611d743d2d92353f8977641977de6bba2f81fc84d0e
-
SSDEEP
6144:PHd2snwZDkCUbuu3zt3FrNPMXDuOYijvafTtfhDV9oUBiljAsC:PHd2sncDkC03JFlMXKujvafTBhDV9mS
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2432 3192 WerFault.exe 4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe"C:\Users\Admin\AppData\Local\Temp\4ce552a5688df3a6055a16c8bc8222e8fbe39fadcde5c254fc9c33d53774ed3c.exe"1⤵PID:3192
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3192 -s 3722⤵
- Program crash
PID:2432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3192 -ip 31921⤵PID:1696