Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 04:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
63719470663f13307897af36343c86aa.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
63719470663f13307897af36343c86aa.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
63719470663f13307897af36343c86aa.exe
-
Size
160KB
-
MD5
63719470663f13307897af36343c86aa
-
SHA1
d9ddf31cdcf2ed6709fb4eb5f0213522ce164ba7
-
SHA256
d18e5665ff491c423804b6457129315ac205a729a2286e630eadddd8c387378d
-
SHA512
67029fdfbe51a2266c8954f33956fa3efd6cda0478af39eaa99d021d0738094ffa067a61918dd1edbaad9ee59aa6ff2950b39fba8cf81b37be6b07b26ded0e54
-
SSDEEP
3072:ioaYTHuv2MMMMM2MMMMMoMy3BkgNMc2bPOc40817grCh6u8HG5+HrR:i1CMMMMM2MMMMM6k+Mc2qcDCgHTV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4912 3396 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\63719470663f13307897af36343c86aa.exe"C:\Users\Admin\AppData\Local\Temp\63719470663f13307897af36343c86aa.exe"1⤵PID:3396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3396 -s 6682⤵
- Program crash
PID:4912
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3396 -ip 33961⤵PID:4920