Analysis
-
max time kernel
91s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-01-2025 07:46
Static task
static1
Behavioral task
behavioral1
Sample
4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089.exe
Resource
win10v2004-20241007-en
General
-
Target
4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089.exe
-
Size
277KB
-
MD5
25cfd19cce5ff58b7e6f359d84448bbe
-
SHA1
45caaaa19a9cf428e6466b47d50086f1b20241da
-
SHA256
4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089
-
SHA512
2794298a2952e946905d355718e281cdc3135776d3d236bdea2533c21b8368f20a01abdd85bbc1cf985ec26c6c8555103d3876551b25ad229c2488bc49ea2310
-
SSDEEP
6144:Pzl/DRfkTC3dM7B+mCDVBV+UdvrEFp7hKB0:PzlbRfky6B+mCpBjvrEH7Z
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1136 1088 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089.exe"C:\Users\Admin\AppData\Local\Temp\4429a1535dd2ed4cc4579635d74eaa7427be7b5c590096a1beca60f733126089.exe"1⤵PID:1088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1088 -s 1802⤵
- Program crash
PID:1136
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1088 -ip 10881⤵PID:3412