Analysis
- max time kernel
133s - max time network
102s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
26/05/2024, 00:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7493e5079e530d9c43b313013a4a7b7a.bin.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7493e5079e530d9c43b313013a4a7b7a.bin.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target 7493e5079e530d9c43b313013a4a7b7a.bin.exe
- Size 46KB
- Sample240526-at25eagb21
- SHA256 6e1e79929fc15516775cf2e8ba323b7bbf1b38e6e6b18cea1add4d1447c08ed1
- MD5 7493e5079e530d9c43b313013a4a7b7a
- SHA1 539f57eaaeb0744ca27d07b3674ea65ef2e5acfc
- SHA512 24e777087cf1ff90719587d028c69104a720070ac02c062a3c172354969e9b11978155547dd64ea16dbae0cfcff6eca084cbffdeb4fb96e9c65e0fb5a05ac535
- SSDEEP 768:IUnSAvu6cMEtClbx0mz6Qoo3SJ0GebDnVR8WIisfp381c/Llf9FQ15qxtbR3LDBe:PnhvuqmQ0m2QOuXfA1L38OjUExtbtK6
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 4568 4480 WerFault.exe 82 3472 4480 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\7493e5079e530d9c43b313013a4a7b7a.bin.exe"C:\Users\Admin\AppData\Local\Temp\7493e5079e530d9c43b313013a4a7b7a.bin.exe"1⤵PID:4480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4480 -s 2202⤵
- Program crash
PID:4568
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4480 -s 2242⤵
- Program crash
PID:3472
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4480 -ip 44801⤵PID:2692
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 508 -p 4480 -ip 44801⤵PID:548