Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
10-12-2024 21:19
Static task
static1
Behavioral task
behavioral1
Sample
3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606.exe
Resource
win10v2004-20241007-en
General
-
Target
3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606.exe
-
Size
277KB
-
MD5
eef2a279d027cdcd3872e2292e198a5b
-
SHA1
957bcfeb2f8b4dd196cd6c1e039d91098f816fb5
-
SHA256
3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606
-
SHA512
359cc2a214464e20383e949201f8a0d07d82872cf4fc9c3cd64a6ef9dc98a7fac28aad29faf7dd2d9db517300f82393e0345ffc6967f660e0c7beb78ea85673e
-
SSDEEP
6144:Efl/DRfkTC3dMnB++CuBV+UdvrEFp7hKZT:EflbRfky+B++CuBjvrEH7m
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3080 3776 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606.exe"C:\Users\Admin\AppData\Local\Temp\3621d07516829d85ac62dbbd19ae28ea41c87c57de4d9a405fb1a218eef28606.exe"1⤵PID:3776
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3776 -s 1802⤵
- Program crash
PID:3080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3776 -ip 37761⤵PID:736