Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
10-01-2023 02:22
Static task
static1
Behavioral task
behavioral1
Sample
dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a.exe
Resource
win7-20220812-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a.exe
-
Size
392KB
-
MD5
d2f32353877e6a4d412f2d0649c193fd
-
SHA1
dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a
-
SHA256
66c8ff770e8c901bb620a83842599ecfdf071567306849fbe9a6005c94ddd173
-
SHA512
e7d66151867607b6bcbae57ced8ce33a5ff15477e57a92e461eb0c300bf125242edeba32328eecec8e0d460b37d3d5c8184f7f41bb7c03b397225ffcea73d081
-
SSDEEP
12288:t1Uyau9eyDi8Zwb2FJxjTwQN5fg1Et2NL:tn9eyWKwkJxruFL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2488 1728 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a.exe"C:\Users\Admin\AppData\Local\Temp\dda6004a9e60666c4d3c0c18ab96a9cbd9567f1a.exe"1⤵PID:1728
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1728 -s 3762⤵
- Program crash
PID:2488
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 1728 -ip 17281⤵PID:3084