Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
31-01-2025 06:55
Static task
static1
Behavioral task
behavioral1
Sample
c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd.exe
Resource
win10v2004-20250129-en
General
-
Target
c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd.exe
-
Size
277KB
-
MD5
1b2b265b472a50256cd4d86394f51a9a
-
SHA1
4b3dfaac983352eaca0ad2e7123c576b8a19bc4a
-
SHA256
c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd
-
SHA512
0347e914e82bec48e7e80b36b72b56b60f07f37c6441f43bbaacd549948f8d9f50be94574f41f66d04a15e3b4bb03429863744504ae2b1e7b08863e4e4cf3810
-
SSDEEP
6144:BAr4/DRfkTC3dM7B+GCyKBV+UdvrEFp7hKbGR:BAr4bRfky6B+GCyKBjvrEH7jR
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4756 3400 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd.exe"C:\Users\Admin\AppData\Local\Temp\c1e6cd04abbae8952066729fe2688259c6ced0191407daec9a333c9618340abd.exe"1⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 1802⤵
- Program crash
PID:4756
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3400 -ip 34001⤵PID:2224