Analysis
-
max time kernel
91s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
21-01-2025 06:48
Static task
static1
Behavioral task
behavioral1
Sample
e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9.exe
Resource
win10v2004-20241007-en
General
-
Target
e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9.exe
-
Size
281KB
-
MD5
59b56a0e7527fbdcd02c732ddc9d71a9
-
SHA1
de559924f2c07b37a964effa51dc93b472ab626b
-
SHA256
e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9
-
SHA512
e5db27868312374176e25cce298e3a8aac741efd02cb636cd2222d8c7fc9011dcc00f3034cd335e57c93b57db07562d9f43f16f02cebe4f1a2e31246eb800bb5
-
SSDEEP
6144:Ctzl/DRfkTC3dM7B+mCasQvMRlkM4RD/qzMfUG3:CllbRfky6B+mCAMRGM4h/qof1
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2312 3904 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9.exe"C:\Users\Admin\AppData\Local\Temp\e4205b968a65d5d53653e81e0dd9ae40c84630651aed24031bae4f8a2b8e8bc9.exe"1⤵PID:3904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 1802⤵
- Program crash
PID:2312
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3904 -ip 39041⤵PID:2880