Analysis
- max time kernel
134s - max time network
159s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
25/05/2024, 02:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f.exe
Resource
win10v2004-20240426-en
1 signatures
150 seconds
General
- Target e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f.exe
- Size 2.3MB
- Sample240525-c19h6sbe5w
- SHA256 e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f
- MD5 dc1b910a198fcf10b45f278d0d3b6372
- SHA1 ceb2c2fbff59bf6216bf742d936517ef3b457704
- SHA512 205c2389a99b2e17d14ecbe5e5faebaf20b3663163df20fff709e45908f4877d2f06c601e0b205f1c953ec2521fe6871c079e1e674d308decb2527a7350a94b3
- SSDEEP 49152:Avz0YnhEJ6V8WCl0s3pAns0F/pPQjg/2D2YG02EzL9:Qz0YnhEJ6V8U6ejxpEU2qYGhEh
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 2512 2992 WerFault.exe 83 2608 2992 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f.exe"C:\Users\Admin\AppData\Local\Temp\e36c5bd2fb4536059fbdd783957ff54101aebd21e553249535afd852e635814f.exe"1⤵PID:2992
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2992 -s 5682⤵
- Program crash
PID:2512
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2992 -s 5722⤵
- Program crash
PID:2608
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2992 -ip 29921⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 2992 -ip 29921⤵PID:5052