Analysis
-
max time kernel
93s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
02-01-2025 05:09
Static task
static1
Behavioral task
behavioral1
Sample
18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541.exe
Resource
win10v2004-20241007-en
General
-
Target
18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541.exe
-
Size
278KB
-
MD5
722aa86ad3b40193d96a87b22149ee1e
-
SHA1
5876655895c02006ea741f0132138da7b4a39abe
-
SHA256
18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541
-
SHA512
01eccc25743170adc1dd127ada77697cd0b6c888eced998b678aa4557ab5dd8fefabd52e94eba0d340a068bd148695e6ed95635623a09a4d78f6a63dbb88f157
-
SSDEEP
6144:XAcl/DmsTC3dM7B+mCcBV+UdvrEFp7hK5Gt:XAclbmsy6B+mCcBjvrEH7WGt
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4580 2328 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541.exe"C:\Users\Admin\AppData\Local\Temp\18bc804115c5548e5295d37a743d5e34c907fe7e48318badcf50a032453a4541.exe"1⤵PID:2328
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2328 -s 1802⤵
- Program crash
PID:4580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2328 -ip 23281⤵PID:2964