Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18-07-2023 14:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b995471abc5159_JC.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b995471abc5159_JC.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b995471abc5159_JC.exe
-
Size
2.1MB
-
MD5
b995471abc515966fc40090b8775cb07
-
SHA1
1f18bac0fa2a9ea2556deb1af68a01dd24ae5e43
-
SHA256
5d24ea3957a3c92decbb7654c890fd4114587fbeab2961e12457f3c71fc4ea12
-
SHA512
0f23a08b701694f7d49668604713fd6988555d381e90aafa8931afd053e1f33ccae9fc6ff3b5e72a8f1527bcefe8dcf5117e3c9043bdd3919ce16c78dc5b92bb
-
SSDEEP
49152:7L6rCDK3V9L6hLo023ffnG933x1bjpssh3ANkTTl:aCDK3V9LA2e3x1BJ3AM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4672 4512 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\b995471abc5159_JC.exe"C:\Users\Admin\AppData\Local\Temp\b995471abc5159_JC.exe"1⤵PID:4512
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4512 -s 3802⤵
- Program crash
PID:4672
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4512 -ip 45121⤵PID:3764