Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
24/06/2024, 23:38
Static task
static1
Behavioral task
behavioral1
Sample
8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246.exe
Resource
win10v2004-20240508-en
General
-
Target
8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246.exe
-
Size
5.3MB
-
MD5
7d43d4507d9d0e31719a45603af51b57
-
SHA1
a096f893429c2afa26f13242298a8b60dc0e3ffd
-
SHA256
8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246
-
SHA512
9275a9772c1b3c1a0741e9d068f4cc0999c371687825bb5c3fc48bc357f74e5082156a67b1dc54874ca291b0cc4f5030753bf48406c0c8170ea98766e4f6887e
-
SSDEEP
98304:rjxyVpwiySZnoOeRZdPmbYk1aPwK0TlKVxOBJBSMl0gJvjcTSM:JQp5VWw4d0ZKVxOBJBS6cTH
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1384 4196 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246.exe"C:\Users\Admin\AppData\Local\Temp\8b5e6fd0442d64b1d5a0d4f3d9cd4c37ad25d3b4d4176fa8550ddb05650fb246.exe"1⤵PID:4196
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4196 -s 8242⤵
- Program crash
PID:1384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4196 -ip 41961⤵PID:1496