Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
21-12-2023 21:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a92daa19f2cc77a21cdbf8db6d8bb68.exe
Resource
win7-20231215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a92daa19f2cc77a21cdbf8db6d8bb68.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0a92daa19f2cc77a21cdbf8db6d8bb68.exe
-
Size
684KB
-
MD5
0a92daa19f2cc77a21cdbf8db6d8bb68
-
SHA1
2074cf815217641a38f5243b8d35bc4e74ec8d31
-
SHA256
ab097e8b19ec166a2ff65d10ab06a8d572216cee2b0c44ebe183a8cb60b2bae7
-
SHA512
3c4f44578df40d952df7330ed9ab6e7df14a2332a864a894e1c34215ad4e4399f9959bf53c60c8e98de15d806630e2a72d622d2eeced3eac22d579fb0f9f45ec
-
SSDEEP
12288:gysoBJKquCdZ6hMDi2WgjbA+Jyrd/PaL7hc4cQFGI:GYJKqNdlDi2WOJMdea4vGI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2932 548 WerFault.exe 0a92daa19f2cc77a21cdbf8db6d8bb68.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a92daa19f2cc77a21cdbf8db6d8bb68.exe"C:\Users\Admin\AppData\Local\Temp\0a92daa19f2cc77a21cdbf8db6d8bb68.exe"1⤵PID:548
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 548 -s 3722⤵
- Program crash
PID:2932
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 548 -ip 5481⤵PID:2192