Analysis
-
max time kernel
101s -
max time network
104s -
platform
windows11-21h2_x64 -
resource
win11-20250410-en -
resource tags
arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system -
submitted
23/04/2025, 08:50
Behavioral task
behavioral1
Sample
5024-11-0x0000000000400000-0x0000000000442000-memory.exe
Resource
win10v2004-20250410-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5024-11-0x0000000000400000-0x0000000000442000-memory.exe
Resource
win11-20250410-en
1 signatures
150 seconds
General
-
Target
5024-11-0x0000000000400000-0x0000000000442000-memory.exe
-
Size
264KB
-
MD5
ade469a1cb23371e297a8aefa416ffe6
-
SHA1
bf5998d8995b0e68c7a4787131a81189f2030b30
-
SHA256
90b75d0e42b33febcc9d25dfb2c1dd4baaabf53f52ba03990935010136165c76
-
SHA512
830a249bee3051bc32389c29a4b38b6dada928bdc3d26453d2284fb635cd19e0eb1a5e5b5a853ead1ea9456ea8c31a2c58d2b1fa981ceafc1bebceb65a011cfa
-
SSDEEP
3072:IPBayiq6lEAKt9sOW1IkTHo9rG8KaG5jnThTq0ufzz:eayiq6bA+Zsq8KaWTZ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5536 5564 WerFault.exe 77
Processes
-
C:\Users\Admin\AppData\Local\Temp\5024-11-0x0000000000400000-0x0000000000442000-memory.exe"C:\Users\Admin\AppData\Local\Temp\5024-11-0x0000000000400000-0x0000000000442000-memory.exe"1⤵PID:5564
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5564 -s 82⤵
- Program crash
PID:5536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 5564 -ip 55641⤵PID:4772