Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2023, 11:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69.exe
Resource
win7-20231023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
-
Target
e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69.exe
-
Size
940KB
-
MD5
eb79f361c4281cd7a9a05a7bc0781f1d
-
SHA1
9d44c6f502acc8edd0a5a1038e7389eab2c7b24e
-
SHA256
e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69
-
SHA512
5967957c83404e5854bca6fe07470cf3f4121d06ebc4f6a383d15df045a49f475e657cc901e26354674c45189a79aa9d011f62e65a1414772046cc30c1bc9dc1
-
SSDEEP
12288:8AaQfWIFmapCAKiNN2uCYAqed28Vyy7oTOB5n:83AKivmKQ9WO
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2324 1468 WerFault.exe 83 3596 1468 WerFault.exe 83
Processes
-
C:\Users\Admin\AppData\Local\Temp\e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69.exe"C:\Users\Admin\AppData\Local\Temp\e76ebe0300e31f0053a6f49986e59e12dabd3b67a9e0b1bc747dc8b9001aaf69.exe"1⤵PID:1468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1468 -s 2162⤵
- Program crash
PID:2324
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1468 -s 2202⤵
- Program crash
PID:3596
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 1468 -ip 14681⤵PID:768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1468 -ip 14681⤵PID:2036