Analysis
-
max time kernel
94s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2025 04:44
Static task
static1
Behavioral task
behavioral1
Sample
3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61.exe
Resource
win10v2004-20241007-en
General
-
Target
3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61.exe
-
Size
277KB
-
MD5
f99893a9e42bc454db012e20a87d78c9
-
SHA1
b5ee93c8778995921b03c8c4a89d62240d62bfad
-
SHA256
3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61
-
SHA512
1894beca468b5eb617d9228475c481505542be0111f564575d661ea9211ba77d877ed7c4e7e7dbb10d03e1c2ca3838c08b69b590591d7be0a419518178ee7671
-
SSDEEP
6144:7AkG/DRfkTC3dM7B+mCNBV+UdvrEFp7hKWGp:7AkGbRfky6B+mCNBjvrEH7ap
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3780 548 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61.exe"C:\Users\Admin\AppData\Local\Temp\3ca4c6848ce1c2efb8222599522a09461549c571c956c5dd633e207823f13c61.exe"1⤵PID:548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 548 -s 1802⤵
- Program crash
PID:3780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 548 -ip 5481⤵PID:3568