Analysis
-
max time kernel
94s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-12-2024 19:37
Static task
static1
Behavioral task
behavioral1
Sample
03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915.exe
Resource
win10v2004-20241007-en
General
-
Target
03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915.exe
-
Size
278KB
-
MD5
cfa77767a863c2e37962756bfc8c7e74
-
SHA1
b33c9a13f475e791a8d4cd89fd6b6e9dc0fad58f
-
SHA256
03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915
-
SHA512
a07e0821f55276747fe263e310c0505c69461442974e6d4f96cbbdc323d51a5d1bd980ea606b8292a63e1965aae3dc0e8c869d9abb82c79a30de42f7856c0637
-
SSDEEP
6144:1Asl/DRfO+DC3dM7B+mCHIBV+UdvrEFp7hKJ1:1AslbRfO56B+mCoBjvrEH7Q1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4644 4500 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915.exe"C:\Users\Admin\AppData\Local\Temp\03c122c6515a2a61869575128e0e27a7c6d745fabd14f147cc3d0358cdec1915.exe"1⤵PID:4500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 1802⤵
- Program crash
PID:4644
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4500 -ip 45001⤵PID:1104