Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
01/06/2024, 20:11
Static task
static1
Behavioral task
behavioral1
Sample
35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78.exe
Resource
win10v2004-20240226-en
General
-
Target
35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78.exe
-
Size
64KB
-
MD5
380ba01c0dd2532ef77452429f7a2fdd
-
SHA1
c413833aa4e7ce4cd457db1c93553dff6fde9585
-
SHA256
35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78
-
SHA512
b22e011fa13d5abf8e916c9a69482c625084ede7426aa0ab93313a07b32a6b71c722d54e58e2c47e4346fe7826d41a383a120110c8edb31569cd4749d0f1c83e
-
SSDEEP
1536:XN9XbY5YkAILaDzg/L6zzDEIwdZDrK6zm6NdQDQ:d9sRLamL6zzDEHdZDrKk/C
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2344 636 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78.exe"C:\Users\Admin\AppData\Local\Temp\35e5193b68ed21bdfa47211c10e1a3a7e191ebda6edf8f3702d7f349e4876e78.exe"1⤵PID:636
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 636 -s 3802⤵
- Program crash
PID:2344
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 472 -p 636 -ip 6361⤵PID:3352
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4256 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:81⤵PID:4964