Analysis
- max time kernel
150s - max time network
122s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/07/2026, 10:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34.exe
Resource
win11ltsc2024-20260706-en
1 signatures
150 seconds
General
- Target 37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34.exe
- Size 10.0MB
- Sample260708-mcmdvafs8q
- SHA256 37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34
- MD5 3e3db62ce8ce96e2f294c01ed67652d5
- SHA1 5b120e2e2c3a9859e290a98aad3686bb93dcc961
- SHA512 2efd1da4e0f4460f7d79e41932bcce1ace67238ec96e1ba7f7f5b84b82f17e82290a64bb281bf33ea89509dbe0dacd5b84d6c424ad369662aa3768a27968b805
- SSDEEP 196608:hLd1kZAy1tv1rocyCAFu+byFOuJmHt/s9SgBHODnQORyHWCG+FV40:tdMV13rocyHMFOPt/s9lHa8BP40
- TLSH T1DBB6221325950508D7E58939C527BEEC31F62BBE4E42CC7E66E966C72A234D0FE33942
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 6024 3432 WerFault.exe 87 5580 3432 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34.exe"C:\Users\Admin\AppData\Local\Temp\37a64dc3b2fc46c2b477468fad500989d8eda7a657a09ac8d393087f65691b34.exe"1⤵PID:3432
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3432 -s 4522⤵
- Program crash
PID:6024
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3432 -s 4682⤵
- Program crash
PID:5580
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3432 -ip 34321⤵PID:1124
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3432 -ip 34321⤵PID:3920