Analysis
-
max time kernel
94s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2024 23:41
Static task
static1
Behavioral task
behavioral1
Sample
a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2.exe
Resource
win10v2004-20241007-en
General
-
Target
a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2.exe
-
Size
278KB
-
MD5
3673b7c2e5446950e720844ec4bf6ec3
-
SHA1
76f3901d28e673833600b4d0697f193c9dc20e78
-
SHA256
a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2
-
SHA512
fb641242fc7e711e692b0f98a02efb0bbfe442d8040d6394d0d4bd8c27d1912c3b3689109fc622877640967d7481ca70f5a57a5331671c57f86b5a886f870804
-
SSDEEP
6144:VAhl/EGrTC3dM7B+mCpBV+UdvrEFp7hKgGX:VAhlMGry6B+mCpBjvrEH7zGX
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1684 4948 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2.exe"C:\Users\Admin\AppData\Local\Temp\a5c30b4e35a4b963a9f4c1dfb759bde3df9e0474c6537f98495dc5959db3c3e2.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 1802⤵
- Program crash
PID:1684
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4948 -ip 49481⤵PID:2848