Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12/10/2023, 11:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
file.exe
-
Size
428KB
-
MD5
92092689290dae72fd0abcf4922e0fad
-
SHA1
c1a41aff47172782696d8a2c2ab26f589e6fbcb2
-
SHA256
94663079693c5066c6528d85df31a4907775315cae40daf749e54c2ccabf6011
-
SHA512
74cd8532858641ddb98d8d817e6f8f50c0f101364761ab3a4e43b4e1ccc3ca33826d74d508ca4f763a42a001458f58d634042c36b0a5de47310b7112c7b72d58
-
SSDEEP
6144:8erUraRLR6pw2eQa01ZcSwSEQhptDVW3jrQ0fuPwjoKklLaqtnhW0sDedfEcd9Wd:8erQaVOEQXuSb5DDL0mIjoKyLaoo
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1308 928 WerFault.exe 80
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵PID:928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 928 -s 11242⤵
- Program crash
PID:1308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 928 -ip 9281⤵PID:4168