Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-01-2025 07:45
Static task
static1
Behavioral task
behavioral1
Sample
5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129.exe
Resource
win10v2004-20241007-en
General
-
Target
5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129.exe
-
Size
278KB
-
MD5
3034aa85b875da62ffd37f60572ead65
-
SHA1
dcf9eccdd83fd7a8cb0c5531db04c4566ba36e79
-
SHA256
5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129
-
SHA512
003d59cd4ce15c17813bda7be8a245b6194029c25ac28906ffc40345f0c1cb6273595760be238701c69776a000fc646ae38e0f50abe9b26dd3179ca719c75709
-
SSDEEP
3072:n/rfzYT6X/DR24l/DFeodwgjfv4suoB+ICTRK02Bd9PqwrlvHMCk9UJxMBwzZamV:drzl/DFf3D4s7B+WCHBV+UdvrEFp7hK0
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4876 1932 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129.exe"C:\Users\Admin\AppData\Local\Temp\5b7856b47df21a4d07136c27bf95023b8bfc96eaf5975d1739c41d7819e94129.exe"1⤵PID:1932
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1932 -s 1802⤵
- Program crash
PID:4876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1932 -ip 19321⤵PID:4176