Analysis
-
max time kernel
149s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
13/12/2023, 23:29
Behavioral task
behavioral1
Sample
faa7653d935216bf3e51abd39484a7fd9ba4c12a0fd24c1a69424331671e550e.exe
Resource
win10v2004-20231127-en
1 signatures
150 seconds
General
-
Target
faa7653d935216bf3e51abd39484a7fd9ba4c12a0fd24c1a69424331671e550e.exe
-
Size
1.6MB
-
MD5
ab3b130e2e502ed1759300f5fa798846
-
SHA1
58be85e6464ee289fb46f6cf0d1dc4b40cbc6e05
-
SHA256
faa7653d935216bf3e51abd39484a7fd9ba4c12a0fd24c1a69424331671e550e
-
SHA512
f29d6d717b4e8dd34a6b691ae5f542b0033fd1db20f3d0d76473388460bee2f666043441f89434f77e5ef0e8817283e206d74a10f27538ec6941d0edd122646f
-
SSDEEP
49152:80ceOGgUYYEmluRKYoFh4kGWusbQnIyDi1E1uonTKi/OjCCNG:1XOGgUYC4RKXFhrusbaDkE1u
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4844 2444 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\faa7653d935216bf3e51abd39484a7fd9ba4c12a0fd24c1a69424331671e550e.exe"C:\Users\Admin\AppData\Local\Temp\faa7653d935216bf3e51abd39484a7fd9ba4c12a0fd24c1a69424331671e550e.exe"1⤵PID:2444
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2444 -s 5642⤵
- Program crash
PID:4844
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2444 -ip 24441⤵PID:3944