Analysis
-
max time kernel
94s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2024 18:58
Static task
static1
Behavioral task
behavioral1
Sample
e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225.exe
Resource
win10v2004-20240802-en
General
-
Target
e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225.exe
-
Size
277KB
-
MD5
8048bc5d2696d01ae7db02beda591606
-
SHA1
ab6dd988114d3f55595d92a2cbd98a100690ff05
-
SHA256
e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225
-
SHA512
6e0d188e75f17edf37ce02962958abfbfb58d653e7917ee0c8a6c4634a9a513574d96d17c515adf17089ba072fb6426b33ce6c4b18aabdb01bed30ff3d287acb
-
SSDEEP
6144:AAYl/DRfWXTC3dM7B+mCGBV+UdvrEFp7hKko:AAYlbRfWC6B+mCGBjvrEH7Po
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target Process procid_target 3144 3864 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225.exe"C:\Users\Admin\AppData\Local\Temp\e1cbc3123a1f68ccf0b7f28ceccbbd5f84d1733c26de2959fa30757abef2b225.exe"1⤵PID:3864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3864 -s 1802⤵
- Program crash
PID:3144
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3864 -ip 38641⤵PID:3532