Analysis
-
max time kernel
139s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19-07-2024 19:07
Static task
static1
Behavioral task
behavioral1
Sample
8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb.exe
Resource
win10v2004-20240709-en
General
-
Target
8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb.exe
-
Size
277KB
-
MD5
e76a1012e8086600b42d18da08f7ca37
-
SHA1
0146037e7171f8dd466d8745351c86c4084ce65a
-
SHA256
8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb
-
SHA512
c00eb284ba46ffe571317f5e60e29e776f5c5e4f4802dbaac0d4032d9f33f8df73daccb29dddbb664c8315c204868ec471e152e52fe34c0d34ee5f0af2afdc15
-
SSDEEP
6144:AA6Ql/DRfkTC3dM7B+mCGBV+UdvrEFp7hKoGe:AA6QlbRfky6B+mCGBjvrEH70e
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4280 4760 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb.exe"C:\Users\Admin\AppData\Local\Temp\8ffb30ad8d660d288731ff3346382757a372a5df60645c34e3a177d7e2640beb.exe"1⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 1802⤵
- Program crash
PID:4280
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4760 -ip 47601⤵PID:3696