Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2025 05:06
Static task
static1
Behavioral task
behavioral1
Sample
e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4.exe
Resource
win10v2004-20250129-en
General
-
Target
e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4.exe
-
Size
277KB
-
MD5
2ce394e34b7933aaadd6a42b6b3ebaa6
-
SHA1
c8dec95b6c8819c22da5bdce6942611d502d03f0
-
SHA256
e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4
-
SHA512
7289c4696fd84ae036f131ad6398f84c5180a6924b6dc5d5b954dc9b7a09de66f44364f651279f3341034dd53fc6e3ba35d968696a4b6ac88f58b9663134243b
-
SSDEEP
3072:vHrfzYPc6X/Y6/meos0gXf+EvC6C36eCWdMuoB+UKrRiEOB9dXCQT1X/MK0dk5xv:AACmfkTC3dM7B+mCGBV+UdvrEFp7hKdb
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4932 4484 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4.exe"C:\Users\Admin\AppData\Local\Temp\e0b7c369ac7cd497c804fe503a65a76606fabed39db60c117ad196607f9c8aa4.exe"1⤵PID:4484
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4484 -s 1802⤵
- Program crash
PID:4932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4484 -ip 44841⤵PID:4784