Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-12-2024 06:45
Static task
static1
Behavioral task
behavioral1
Sample
9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789.exe
Resource
win10v2004-20241007-en
General
-
Target
9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789.exe
-
Size
281KB
-
MD5
d2c732297553f411eb8fd9ec2b5f7f85
-
SHA1
9c614d6069e96be45a51e396493e5b805151e60b
-
SHA256
9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789
-
SHA512
a4b02ba0aff15d80a41ee15b1bb231af67df36d7f78c880c18b644a3d9b073cbf0fd92fee7555bd0327bb910ae2f5580dfcb534a0b98c77a09dc6149149e903d
-
SSDEEP
6144:BAl3XkTC3dM7B+GCyusQvMRlkM4RD/qzMfUrGt:BAlHky6B+GCyUMRGM4h/qofAGt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1252 4744 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789.exe"C:\Users\Admin\AppData\Local\Temp\9a2ee879e338631dde907b4bbe4aa045eb7a54b8974ee8947fbe3d246782c789.exe"1⤵PID:4744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4744 -s 1802⤵
- Program crash
PID:1252
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4744 -ip 47441⤵PID:3316