Analysis
-
max time kernel
147s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
19/07/2023, 15:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f6a538876e4457exe_JC.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f6a538876e4457exe_JC.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
f6a538876e4457exe_JC.exe
-
Size
2.1MB
-
MD5
f6a538876e4457d9ab87587aca0ffe7a
-
SHA1
67842be60a443dcad8b3c5d505072ee424f96b25
-
SHA256
8882f1e7f1270bea490427d7cef19baf093878e0aa2c976391431e35664252f2
-
SHA512
96a51b369a19adee24ffd3e137de32e4b3f418e68ab66321168fd8243ee804aacf76421c3d3a693b9e48408cdc1357c277826aef3cb4076547b8ee74fe0c292a
-
SSDEEP
49152:gNxanHuRSt/Nnudvac09ZC6mgk9m1irx2zsh3ANkTTl:pHuRSt/Nnu02Lm1isA3AM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3416 1164 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\f6a538876e4457exe_JC.exe"C:\Users\Admin\AppData\Local\Temp\f6a538876e4457exe_JC.exe"1⤵PID:1164
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1164 -s 3802⤵
- Program crash
PID:3416
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 1164 -ip 11641⤵PID:2312