Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2024 17:53
Static task
static1
Behavioral task
behavioral1
Sample
16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c.exe
Resource
win10v2004-20241007-en
General
-
Target
16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c.exe
-
Size
277KB
-
MD5
62017c419997ae819cf42fe267142473
-
SHA1
8261232c87d7481a53b0f7beb1820d9ae7c7ef46
-
SHA256
16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c
-
SHA512
4a96a1c9da89570f9c3f57e7e2244685232fbfefad6675d5ef6ec132c28d8d147b3284b624d3fe50b10bac3a18368540b5bfee36be4d1bf25b2891b238786b63
-
SSDEEP
6144:pAdl/DgkC3dMnB+uCk+BV+UdvrEFp7hKHj:pAdlbgJ+B+uC3BjvrEH7mj
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2068 4916 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c.exe"C:\Users\Admin\AppData\Local\Temp\16c5da96002d54c18dcf6e9b22aa12661068c2e6fc231f9e1028a544de8ea62c.exe"1⤵PID:4916
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4916 -s 1802⤵
- Program crash
PID:2068
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4916 -ip 49161⤵PID:4848