Analysis
-
max time kernel
95s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
03-02-2025 05:44
Static task
static1
Behavioral task
behavioral1
Sample
ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b.exe
Resource
win10v2004-20250129-en
General
-
Target
ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b.exe
-
Size
277KB
-
MD5
3891a60b71226fb3c7782eed5553bf26
-
SHA1
586df9e4bc944d2dd3b3ee55c9f6dfba3de523e5
-
SHA256
ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b
-
SHA512
dda0b3f95b2c6dc5cfa17b24c37f947ca222dd68f98f4ad7e971d0f24f96a3aed841183482abd3c4eeadce34878be61aecf5089123dd01ab186b671894d91251
-
SSDEEP
3072:aHrfzY6c6X/YFW4l/DReos0gpdWdMuIB+NSzx602h9dXawrlvHcSktE5hcRQjpaU:AA3l/DRfkp6MnB++CuBV+UdvrEFp7hK6
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4372 3480 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b.exe"C:\Users\Admin\AppData\Local\Temp\ad0f938f6333086809d2d11239a980e9a76296ea8aceb039f8c677e25534526b.exe"1⤵PID:3480
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3480 -s 1402⤵
- Program crash
PID:4372
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3480 -ip 34801⤵PID:4804