Analysis
-
max time kernel
94s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20-01-2025 08:50
Static task
static1
Behavioral task
behavioral1
Sample
b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793.exe
Resource
win10v2004-20241007-en
General
-
Target
b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793.exe
-
Size
281KB
-
MD5
13a7e71ca69f3530f2df1fcc6048e341
-
SHA1
c1fb132de2c04eb32a0e6860193d9703a358b041
-
SHA256
b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793
-
SHA512
4fe8469922ed86c4b29d7b23965049eb92256f2d883af5ffbfaceb36ac6798a0abd7ad1860e53c6c8c66c96710e42ec75fb8b7a4f2f3e84b8d6a365cc07c3efb
-
SSDEEP
6144:BAIl/DRfkkPa3dM7B+GCyusQvMRlkM4RD/qzMfUx8:BAIlbRfkk26B+GCyUMRGM4h/qofc8
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3932 3552 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793.exe"C:\Users\Admin\AppData\Local\Temp\b7c025073b59ee78cf04102574bb13afe9c56286026bb5aae8b51d01797a7793.exe"1⤵PID:3552
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3552 -s 1802⤵
- Program crash
PID:3932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3552 -ip 35521⤵PID:5080