Analysis
-
max time kernel
101s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11-12-2024 16:13
Static task
static1
Behavioral task
behavioral1
Sample
6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f.exe
Resource
win10v2004-20241007-en
General
-
Target
6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f.exe
-
Size
277KB
-
MD5
33bcb4f634fe7ac2981e33451caa213e
-
SHA1
cc940828f8b29a9efab6f6811bd4fd85bc171f86
-
SHA256
6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f
-
SHA512
1677dd00fad3e4a350aa01ba046799ebf15c04027ab712ab7fc496461786a944efe1cabccb26a097bf500b49546ddfd009b69c7d5dcd1928a1a5e05054570963
-
SSDEEP
3072:J/rfzYs6X/D42bodwgjf+FvC6C36lnWesuoB+yWPduoKt5JbuEHxLDQmYZYVtg9J:Orxo3WC3as7B+mC2BV+UdvrEFp7hKiLd
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3056 1316 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f.exe"C:\Users\Admin\AppData\Local\Temp\6ce7abf42a46e7711d641c27e7efd8dbf5c40d21245784d9270ab7fa49f5a93f.exe"1⤵PID:1316
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1316 -s 1802⤵
- Program crash
PID:3056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1316 -ip 13161⤵PID:2528