Analysis
-
max time kernel
139s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
19-08-2023 13:40
Behavioral task
behavioral1
Sample
418e966a9f002fcb8319062096335977_stop_JC.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
418e966a9f002fcb8319062096335977_stop_JC.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
418e966a9f002fcb8319062096335977_stop_JC.exe
-
Size
1.1MB
-
MD5
418e966a9f002fcb8319062096335977
-
SHA1
9f2d1bb6a97e926690fe55dcb9e379fda42b5345
-
SHA256
c5f82b52a651846d9c6d8e86de9ced55e0821bad05acc967a0f9478e3a771ecd
-
SHA512
13c5ceb1805bdc40086b752646e81f9640f39f9819e2af6f8c3383b8a081cddc2dea67ba798c7e2bb59a8b1f165244ad325456197f5d1193503ccd6baef72c56
-
SSDEEP
24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/XRPOO82dHUq7:F0dwAYZt6C31WeTPRPOh2BUq7
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1400 1624 WerFault.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\418e966a9f002fcb8319062096335977_stop_JC.exe"C:\Users\Admin\AppData\Local\Temp\418e966a9f002fcb8319062096335977_stop_JC.exe"1⤵PID:1624
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 5682⤵
- Program crash
PID:1400
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1624 -ip 16241⤵PID:992