Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
09-07-2023 08:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a542c1209886c9exeexeexeex.exe
Resource
win7-20230703-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a542c1209886c9exeexeexeex.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a542c1209886c9exeexeexeex.exe
-
Size
179KB
-
MD5
a542c1209886c9751a51f7266934f386
-
SHA1
dfa04160a21b061e1c28d57a3195d65dc94a8e76
-
SHA256
e63067986126c56eedd55b0bde4121d68b047c7919ecd23d96eae402b8dd4d70
-
SHA512
1dea9ef9b0e6be3c5a1a5080c9281581e888bf107efa30c4bca7b4562d317a78316faa75a5a21a1bc79be6876d99e3a3ac7a50ac8d3aa5a777a2c7391ab422a7
-
SSDEEP
3072:by2jabqv/3+5PdGhIcGgDXBpbsiK3QyxxzcdbgDHx5RKGfBHJviqaztj4R+R7:by8ab+/+5odGmBpbU3QKY8Hx5UetJKk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2840 4716 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\a542c1209886c9exeexeexeex.exe"C:\Users\Admin\AppData\Local\Temp\a542c1209886c9exeexeexeex.exe"1⤵PID:4716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4716 -s 5162⤵
- Program crash
PID:2840
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4716 -ip 47161⤵PID:2680