Analysis
-
max time kernel
129s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24-05-2024 19:48
Behavioral task
behavioral1
Sample
ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe
Resource
win10v2004-20240508-en
General
-
Target
ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe
-
Size
426KB
-
MD5
ee979066a7a094899040bd39ed4f0939
-
SHA1
15ef55db93ea16c7bcddcacef4371b5803165cd4
-
SHA256
ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649
-
SHA512
16681216584feca1951264ce0dd9ce50e5a3beef575dd8f390b307189f3a0650de9d2d21ad15b8fc05950c4bb9255220449133db44cfd26d82e6434892a906d8
-
SSDEEP
6144:ZSL8ORZiBiWCEpXoSASfnZAUTyHwQTzdZZGIsuDO2IgLUnuY+vzjTq:8LjiEaej0nyQQnDZGIFKRgLLvq
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 1948 3168 WerFault.exe ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe"C:\Users\Admin\AppData\Local\Temp\ca621343c5b0378dbc5c7d263f4171d6e65be8fbe3c60af628747dee13e28649.exe"1⤵PID:3168
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3168 -s 2002⤵
- Program crash
PID:1948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 3168 -ip 31681⤵PID:1804