Analysis
-
max time kernel
93s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
04-06-2024 19:52
Static task
static1
Behavioral task
behavioral1
Sample
297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40.exe
Resource
win10v2004-20240508-en
General
-
Target
297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40.exe
-
Size
14KB
-
MD5
e3a9abdd0228762851cd4f8dbb416298
-
SHA1
d93ba1139f142338361659bfb84909d9628fdb10
-
SHA256
297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40
-
SHA512
6935381532b1322eb3eeae0c72dd1175243537d3bae7091352f42afa22afbe46ec5009611230abf256aea4e9fce18694c8543a2db68c9d8884ffcc1c834145e5
-
SSDEEP
192:2rj1+ScjJv371e2BMX5VTpjszaGPYock7JRRqxHhfK1z9d9GgrnWiXqDE045HQDN:CjA37QG4Tpjs+MD+qlGgrWi6DE045H
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1756 4572 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40.exe"C:\Users\Admin\AppData\Local\Temp\297177d0ba18368e1e26dd6c8eb436de538385c84af2ef6e1bb37b3f3e54ac40.exe"1⤵PID:4572
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4572 -s 2322⤵
- Program crash
PID:1756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4572 -ip 45721⤵PID:1876