Analysis
-
max time kernel
90s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2025, 06:34
Static task
static1
Behavioral task
behavioral1
Sample
49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c.exe
Resource
win10v2004-20241007-en
General
-
Target
49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c.exe
-
Size
278KB
-
MD5
7fd8fbab489b3420aa573faf040a5533
-
SHA1
09b79c84bda1cd64cfed216a95611d4797056a5c
-
SHA256
49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c
-
SHA512
516c4c27b99e168ebc54b1dae7da057fc22c50fff6eca62fef0f8667bc5b11a7b4fb78bb4f26b4c7ade9d93ebdf2953e22bcba51ccfedbed8e6f26333a319a93
-
SSDEEP
6144:drhl/DFf3VRC3as7B+WCHBV+UdvrEFp7hKjN:drhlbFf3VLaB+WCHBjvrEH7UN
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 380 1956 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c.exe"C:\Users\Admin\AppData\Local\Temp\49f252be89f34dad17eb7922ba268faf723d3e5f99559cfcd7e4c19499e51c6c.exe"1⤵PID:1956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 1802⤵
- Program crash
PID:380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1956 -ip 19561⤵PID:3404