Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
13/12/2023, 23:30
Behavioral task
behavioral1
Sample
d3eb1b64d8fb50318855a94cfd8a600a165d81609fecc11379868fea91636b27.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
-
Target
d3eb1b64d8fb50318855a94cfd8a600a165d81609fecc11379868fea91636b27.exe
-
Size
1.6MB
-
MD5
33d5a1d962ffa9e420766b5f756364c1
-
SHA1
0bd326d80f24a4ca52f6616372fd543a323a8f3a
-
SHA256
d3eb1b64d8fb50318855a94cfd8a600a165d81609fecc11379868fea91636b27
-
SHA512
4cb1ca437cce97e6f32727f36f7cf57c7fe7f6a936ffaec806a766eb3896f14164ea3f8752c50576b2debe5ba9e6142bc45012f542ec5ace58184ac6955bd588
-
SSDEEP
49152:80ceOGgUYYEmluRKYoFh4kGWusbQnIyDi1E1uonTKi/OjCCNG:1XOGgUYC4RKXFhrusbaDkE1u
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3308 4800 WerFault.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3eb1b64d8fb50318855a94cfd8a600a165d81609fecc11379868fea91636b27.exe"C:\Users\Admin\AppData\Local\Temp\d3eb1b64d8fb50318855a94cfd8a600a165d81609fecc11379868fea91636b27.exe"1⤵PID:4800
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 5642⤵
- Program crash
PID:3308
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4800 -ip 48001⤵PID:4228