Analysis
-
max time kernel
93s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
05-01-2025 08:34
Static task
static1
Behavioral task
behavioral1
Sample
143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e.exe
Resource
win10v2004-20241007-en
General
-
Target
143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e.exe
-
Size
277KB
-
MD5
80b7107f70e5febcca6b911525af86ad
-
SHA1
f9143e64ce5392634aa7aeb64e998e5d2bd79292
-
SHA256
143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e
-
SHA512
821ee80e15c68f8336d70c9c3aa0acc6c64280228c66f4c398f0f03c3c51378d3539c6d8ae9b732483e21f700cf45ab977e00edef62bc665cc079570a05a6f02
-
SSDEEP
6144:ZPLA4l/DRfkTC3dMnB+uCk+BV+UdvrEFp7hKs:ZPLA4lbRfky+B+uC3BjvrEH7T
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1772 4816 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e.exe"C:\Users\Admin\AppData\Local\Temp\143c0b160259d19430b939c00277a5fb025e6558a3684899356208bff2e5d47e.exe"1⤵PID:4816
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4816 -s 1802⤵
- Program crash
PID:1772
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4816 -ip 48161⤵PID:2064