Analysis
-
max time kernel
94s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11-11-2024 02:26
Behavioral task
behavioral1
Sample
0fa7d26cca93b49f8dad1ddb82fa96da.exe
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0fa7d26cca93b49f8dad1ddb82fa96da.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0fa7d26cca93b49f8dad1ddb82fa96da.exe
-
Size
276KB
-
MD5
0fa7d26cca93b49f8dad1ddb82fa96da
-
SHA1
8bd1c65fa4d2e4e4b6835606e5c89d099cbb9888
-
SHA256
0517bf7d25334176c49f3cce58b54ea458a44ca5037e3a4ae6ffecbc948419bc
-
SHA512
09f94107ed6378b042c74850c43e0c6b973a8a093739a5a5ce39097831653a7facedc1b4e223445861a00a388329b8a05aa61f5aa807ecb4631ff3fcd7f2ae94
-
SSDEEP
6144:D8zQhvTy+PebxIYMZMBgcf0T9shXIAVqhfbWCkl:D8zQhvTDYGMj/Vq1b1kl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4564 2556 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\0fa7d26cca93b49f8dad1ddb82fa96da.exe"C:\Users\Admin\AppData\Local\Temp\0fa7d26cca93b49f8dad1ddb82fa96da.exe"1⤵PID:2556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2556 -s 2082⤵
- Program crash
PID:4564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2556 -ip 25561⤵PID:4636