Analysis
- max time kernel
93s - max time network
136s - platform
windows10-2004_x64 - resource
win10v2004-20231020-en - resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system - submitted
27/11/2023, 08:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
Resource
win7-20231023-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
Resource
win10v2004-20231020-en
1 signatures
150 seconds
General
- Target ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe
- Size 148KB
- Sample231127-j4ksjsfc4w
- SHA256 ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5
- MD5 002996b20f729826f491f41a41ce7020
- SHA1 afca095abc9ce5b77a32c1d36abd5bc60770e967
- SHA512 892c73cf100e958c3811d0d8aa7d9ba18cf0bcfbf0807f9ae8ce12422075fbca334d3c314438978f5908860208c5b074b316ec80adf51bd1d7d22db0a085239b
- SSDEEP 1536:gFboDGLlb2EDOA0f63luk+t1uDmV+2Po+I0whO9ChAf/dQ22ERKOreG3GBqkJZ50:kLVi7a+t1uA+vgDHG22EY6bk9G2qX
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 4248 4472 WerFault.exe 82 3592 4472 WerFault.exe 82
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe"C:\Users\Admin\AppData\Local\Temp\ce89251c64e775fc7c2a61e6a601e832244e3f1f0668d19eac421dff8d1956d5.exe"1⤵PID:4472
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 4522⤵
- Program crash
PID:4248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4472 -s 4602⤵
- Program crash
PID:3592
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4472 -ip 44721⤵PID:4520
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 4472 -ip 44721⤵PID:4380