Analysis
- max time kernel
134s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
27/05/2024, 01:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2.bin.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2.bin.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
- Target 284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2.bin.exe
- Size 41KB
- Sample240527-becrmsbe84
- SHA256 284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2
- MD5 5fc65066299949ecffb04af69c37fd19
- SHA1 8afe51f2a78fa8e0619226d903aea2dee6bf0067
- SHA512 ee03784f7135933d9f54413c210e8abadca4bb783bb04918f9bc7746b7f0bf23aea3a997b37163c92ab1299670afe4c63b96c139852e9f235d4017a4b1ce94ae
- SSDEEP 768:RY+jvRwHqTH4uFU74LuVuLeBZfqM8hDNGa6+lTVBwbdsmpyQl7:RYWvRPL4uFnSuSBQVa+9/wbdhy47
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2112 2124 WerFault.exe 91
Processes
-
C:\Users\Admin\AppData\Local\Temp\284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2.bin.exe"C:\Users\Admin\AppData\Local\Temp\284f7bc4d18ca5d943269a375e81249dc5cdbfc4428382e196df552d50a6d2a2.bin.exe"1⤵PID:2124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2124 -s 3122⤵
- Program crash
PID:2112
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2124 -ip 21241⤵PID:4044
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4196,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:81⤵PID:4728