Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2023, 10:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6c234982011c22exeexeexeex.exe
Resource
win7-20230703-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6c234982011c22exeexeexeex.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
6c234982011c22exeexeexeex.exe
-
Size
323KB
-
MD5
6c234982011c229f2963d79423e463df
-
SHA1
a00200cc469c5c656ec56d8f48ba7453da42128a
-
SHA256
742d269cca8c1317eddca55a708016f97490536cdff88899911bc196a636a5a7
-
SHA512
af12f75e59281794a3b7e8f53da0dc22f21e9967424e3a86074587e6e7a82bab8a92c0d2de3c5f9af39552c94e8b99919588f7df2cfadb4042b7ad8e28a00209
-
SSDEEP
6144:ZuJFLUb2Jk49ItrVe5h+mT5EWZxYrYBei6/:ZuJFgb2aDVkT5EYxYrQU/
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3720 2308 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c234982011c22exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\6c234982011c22exeexeexeex.exe"1⤵PID:2308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2308 -s 2122⤵
- Program crash
PID:3720
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2308 -ip 23081⤵PID:4304