Analysis
-
max time kernel
1s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/07/2023, 17:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
18934fac0f8988exeexeexeex.exe
Resource
win7-20230703-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
18934fac0f8988exeexeexeex.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
18934fac0f8988exeexeexeex.exe
-
Size
520KB
-
MD5
18934fac0f89882270ab22a73c2ba5a7
-
SHA1
964be58759a77b59d3d946ad043a80f0dd0b7bd4
-
SHA256
b0806edb044250c278a77329ebd8072eba566d580783cded1f97dd054504551f
-
SHA512
f13893b98288047694ad1e10947747dc7391cd79506e65164392093ce2e3414bbf5721dac0e57c42bd152e6857ca2640988bc80bbd7ac72f9cd0ac5059028af0
-
SSDEEP
12288:w9K65BmtNxS3diPpanCykhDRO/kbXS5PNZ:w9K6ytedi8n9khkM7S5N
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3080 4668 WerFault.exe 79
Processes
-
C:\Users\Admin\AppData\Local\Temp\18934fac0f8988exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\18934fac0f8988exeexeexeex.exe"1⤵PID:4668
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4668 -s 4002⤵
- Program crash
PID:3080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 208 -p 4668 -ip 46681⤵PID:1404