Analysis
- max time kernel
106s - max time network
111s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
27/07/2024, 07:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aaf23265cec6a0cdaf95aeb55765a110N.exe
Resource
win7-20240705-en
20 signatures
120 seconds
Behavioral task
behavioral2
Sample
aaf23265cec6a0cdaf95aeb55765a110N.exe
Resource
win10v2004-20240709-en
2 signatures
120 seconds
General
- Target aaf23265cec6a0cdaf95aeb55765a110N.exe
- Size 981KB
- Sample240727-jqthjayamg
- SHA256 75a52fe69cc5d30d6c5d835f10d045c7687e09dc30e556cdcb0c6832e13d85cd
- MD5 aaf23265cec6a0cdaf95aeb55765a110
- SHA1 58531eb5c27842380e445e06d17b2c43cb4e5a8b
- SHA512 d3facbe6d71f79173869155c0ac5f924189509bd4b9b564952cfc82e4d5f1450d61f75236cdbd3cc3bf1c41e2845ac26b9943f0aef104abb075d887685e1adf0
- SSDEEP 12288:vNDvyEJ1P4AAJEXbZ9VplZ52qmI/Wnl4Zezlr46zf/abt:B3JlWJMbdSz3WelrVzO
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 408 456 WerFault.exe 84 - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language aaf23265cec6a0cdaf95aeb55765a110N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aaf23265cec6a0cdaf95aeb55765a110N.exe"C:\Users\Admin\AppData\Local\Temp\aaf23265cec6a0cdaf95aeb55765a110N.exe"1⤵
- System Location Discovery: System Language Discovery
PID:456 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 456 -s 2562⤵
- Program crash
PID:408
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 456 -ip 4561⤵PID:2488