Analysis
-
max time kernel
141s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
13/07/2023, 20:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
131e3e771c8498exe_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
131e3e771c8498exe_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
131e3e771c8498exe_JC.exe
-
Size
2.1MB
-
MD5
131e3e771c84981dcc13a98e9447ce20
-
SHA1
f634859620d0106c7e110e7a78b65e4df83199aa
-
SHA256
e5779dd4fdf9ed84c9fe92e722a7cccaf8d673560d90da2f62563682cfe755ad
-
SHA512
3ee08ed63271f8456b4ba56ebd668529e31d2d02b6d397c263e5f33b6d35ea4b22118ec9270815879f7544e12729d77998ec74588561cdef5f13edc922ad8767
-
SSDEEP
49152:lD6j6DiXN9TyBzosmPHPdeQvPZtrbh8sh3ANkTTl:s6DiXN9Tom3PZtR53AM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5008 1216 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\131e3e771c8498exe_JC.exe"C:\Users\Admin\AppData\Local\Temp\131e3e771c8498exe_JC.exe"1⤵PID:1216
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1216 -s 3802⤵
- Program crash
PID:5008
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 1216 -ip 12161⤵PID:2008