Analysis
-
max time kernel
94s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2024 06:47
Static task
static1
Behavioral task
behavioral1
Sample
de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a.exe
Resource
win10v2004-20241007-en
General
-
Target
de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a.exe
-
Size
278KB
-
MD5
4b9b5303cbe4d6914ef681924de17663
-
SHA1
7a5ea1600b419e3460a1c9aa6a7d7adb64c91893
-
SHA256
de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a
-
SHA512
42ec44d9250b682916fbd05479580b86b3bf9cfc178ee61f7133742092f5209f6ad0b4f6923a936866b6152107d8e70615a298e4be89b76cfb5c3da9474ac2f7
-
SSDEEP
6144:oQAyl/DRfkTC3dM7B+WCeBV+UdvrEFp7hK62:oQAylbRfky6B+WCeBjvrEH7X2
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1268 1244 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a.exe"C:\Users\Admin\AppData\Local\Temp\de778647b5d051c5f6cc00757055bc220a02ef6243192cfaff9bd2e854add05a.exe"1⤵PID:1244
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1244 -s 1802⤵
- Program crash
PID:1268
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1244 -ip 12441⤵PID:1300