Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
18/09/2023, 09:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e204d70e6198c83cea1a13072775b407.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e204d70e6198c83cea1a13072775b407.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
e204d70e6198c83cea1a13072775b407.exe
-
Size
692KB
-
MD5
e204d70e6198c83cea1a13072775b407
-
SHA1
3fe06f327a4f5d41959bbf59c42123e5a3b97484
-
SHA256
2ae5f13213c59a9c146536388728551183f5fce65d4d2794e1c9e327751610be
-
SHA512
b3de7f6ef8bec150a9ee10ebec4f022bf922906fcd9228f6632e352fac83e585ad180ad2f3343350fd6a6524db7bfcd4349731f0120f2114cef0cc7fe8848687
-
SSDEEP
12288:s1IY9Qa60kexWNWxfWSX+DEnhtBFvgh62Lpwx2L6VxPsW8+3qR31eT8k9PBzUqtl:SIApfjODs9
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2036 1140 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\e204d70e6198c83cea1a13072775b407.exe"C:\Users\Admin\AppData\Local\Temp\e204d70e6198c83cea1a13072775b407.exe"1⤵PID:1140
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1140 -s 8482⤵
- Program crash
PID:2036
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1140 -ip 11401⤵PID:1164