Analysis
- max time kernel
2s - max time network
8s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
10/06/2024, 22:04
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240508-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10v2004-20240508-en
1 signatures
300 seconds
General
- Target Server.exe
- Size 1.3MB
- Sample240610-1y9cdssdmg
- SHA256 ce8fd5ec0b2ee4e5d87d35622eeaa022ee971801c97bcb3726ca6ebe4b576238
- MD5 dd6667db55acaefa2d7e99dcf5d97a26
- SHA1 c1b281ef573df4da584294c61b5322edfed589ad
- SHA512 916c8b63400c0a8e495fc59d8e348499a6f04421e79599803c7ac4cd828c82f389bfd733471de27cc1643c03723429f8544446d9adc69082e6a5032139a1f1f1
- SSDEEP 24576:RIVMEFyWLoQJV+fLmomlEkmmsEnE7E7E7EUmemmmmmmIDmeIjwnaKk:RWMEMWlVILmomSkmmtEQQQUmemmmmmm7
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4356 916 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\Server.exe"C:\Users\Admin\AppData\Local\Temp\Server.exe"1⤵PID:916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 916 -s 8242⤵
- Program crash
PID:4356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 916 -ip 9161⤵PID:2844