Analysis
-
max time kernel
92s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
31/05/2024, 23:03
Static task
static1
Behavioral task
behavioral1
Sample
6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac.exe
Resource
win10v2004-20240508-en
General
-
Target
6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac.exe
-
Size
14KB
-
MD5
9108ef60c9415a8d65e3082d996cb922
-
SHA1
2e6f453d42c213f171402a2bee728d79226a9590
-
SHA256
6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac
-
SHA512
a773f81659d48034ccb44fe6874d809edeab04da7ed67721a412fdd4493f29313ff23f0afe3fa7cb8a515c7fcc2b553822e6c65570f097ace1f1d66184ee008e
-
SSDEEP
192:VlZ3JtCW0QSeOneGw3AAnB4iq6+/gWffffffffffffffHT4kusi8qDE045HQzSSS:jh7yQSB/9Anj+/guuT7DE045H
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4420 1572 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac.exe"C:\Users\Admin\AppData\Local\Temp\6edf6aa6cb23a2d02d0eab6f494af9fc6e044a46e5c072b2e74db1b385f8cfac.exe"1⤵PID:1572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1572 -s 2242⤵
- Program crash
PID:4420
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1572 -ip 15721⤵PID:3240