Analysis
-
max time kernel
51s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
13/06/2024, 01:51
Static task
static1
Behavioral task
behavioral1
Sample
a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72.exe
Resource
win10v2004-20240508-en
General
-
Target
a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72.exe
-
Size
5.9MB
-
MD5
e90137acd0cbc8dd463c671a54e79b6f
-
SHA1
7ff5b999bbc956b49ba98091650df75eef9f6c8d
-
SHA256
a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72
-
SHA512
d37053c590f6e7837803086fcd69387a6761c4383203ec02b7013e1044762c5ee228ed6768c1111172e41ec2744a0851ebbacbcf56006454053058f0b7913d03
-
SSDEEP
768:o5vWskoWdZYrsd6xt3TxdKROnzHML1ZJTofB0rPLICdJH6yzBv4qeTudFxyYe:ovSa86TVdzTMLHFJrPLIsH6yzBvoMSY
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2484 1596 WerFault.exe 80 332 1596 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72.exe"C:\Users\Admin\AppData\Local\Temp\a940fc6b4fea2a90133500eaeb752c09ea260aa4817d0cbbe60e1376c63afb72.exe"1⤵PID:1596
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1596 -s 2202⤵
- Program crash
PID:2484
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1596 -s 2242⤵
- Program crash
PID:332
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1596 -ip 15961⤵PID:3784
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 1596 -ip 15961⤵PID:3480