Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2023, 12:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ea03ac0032aad17aa7d70727f25873c.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ea03ac0032aad17aa7d70727f25873c.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
8ea03ac0032aad17aa7d70727f25873c.exe
-
Size
204KB
-
MD5
8ea03ac0032aad17aa7d70727f25873c
-
SHA1
0643277e3fcffb090da02e380f768efbb12ce531
-
SHA256
28207bca829300636b6aee88f841942ce0b182532939eaebee8068075612e9b8
-
SHA512
357f3a66750586d259fed5385725d2fddcd4925d293015a499bc7ddbff02b5df0f06990db112890bf00c26e884af6082ffb5305103f57ef3a32984a97894e387
-
SSDEEP
3072:Ry3c8tPxAXkFqyy3Fr3BHhhrkwJZdY7LpWL+8HZ5GtSKx5Yjz+yXIUB3TPsR:IRB0hFdjkwJZdY7lEHZExe/bXxA
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4700 3364 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ea03ac0032aad17aa7d70727f25873c.exe"C:\Users\Admin\AppData\Local\Temp\8ea03ac0032aad17aa7d70727f25873c.exe"1⤵PID:3364
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3364 -s 3322⤵
- Program crash
PID:4700
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3364 -ip 33641⤵PID:2736