Analysis
-
max time kernel
95s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2024 20:07
Static task
static1
Behavioral task
behavioral1
Sample
c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b.exe
Resource
win10v2004-20241007-en
General
-
Target
c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b.exe
-
Size
278KB
-
MD5
3f832ef01f8962e3b3701121a16d503f
-
SHA1
03e19f5978ffe57cbb99408c91a782d25bf99d4c
-
SHA256
c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b
-
SHA512
77b7bd3a6d7712d8f55dc907574100236cd794798a3c6da8fd7505c921e633e78346ccb8735a9e1c9d96b878da3f6c51a91ca4f81aaaca4dedf264a205d8834f
-
SSDEEP
6144:aAtl/DRfmOC3dM7B+WCeBV+UdvrEFp7hKAV:aAtlbRfmL6B+WCeBjvrEH7DV
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 216 2324 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b.exe"C:\Users\Admin\AppData\Local\Temp\c68a17bbf24e5cb29a373fb547625ec7e6f8863e18d415d5a36018cc2443523b.exe"1⤵PID:2324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2324 -s 1802⤵
- Program crash
PID:216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2324 -ip 23241⤵PID:3524