Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2025 06:53
Static task
static1
Behavioral task
behavioral1
Sample
0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd.exe
Resource
win10v2004-20241007-en
General
-
Target
0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd.exe
-
Size
277KB
-
MD5
670b0ddd5d629c5d142ca28590738269
-
SHA1
7a32804c742af48a5bb69ca6b962d928b3383c64
-
SHA256
0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd
-
SHA512
d93ac804768d20b80d2cfa26ebe9180df06ad7ba1fee5af73be3c2021a44dc44e7cf6f45d0965f0ac2455d5e4cf169ec6f7f12cc0c525b195077eb402ce28a99
-
SSDEEP
6144:LwNBlFDvFL0C3AeIB+GClBV+UdvrEFp7hK+S:LwNBlpvFLUnB+GClBjvrEH7LS
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2888 3332 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd.exe"C:\Users\Admin\AppData\Local\Temp\0371c6ce73013cab6d6bdd6390ce7fa31257c1ce531827a4e80f941f0b2377fd.exe"1⤵PID:3332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 1802⤵
- Program crash
PID:2888
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3332 -ip 33321⤵PID:2692