Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2023 13:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
acd43c3378512da7c13429be49190a23.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
acd43c3378512da7c13429be49190a23.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
acd43c3378512da7c13429be49190a23.exe
-
Size
421KB
-
MD5
acd43c3378512da7c13429be49190a23
-
SHA1
7c96d320977329a7cffffc05ad3cefbbb9468e6b
-
SHA256
59c58235684885e37d43f7cc8cdc0ba1b6314dd89a9f9714f5a998e34ca5173e
-
SHA512
99837d312adaa6dd761ef3a1fd9cd6692db32c38e8b068028559d7076de5fac369274bc3f8b25a3a399586d99babaa1369ffd5b06f0593f4654ca0f8caebc402
-
SSDEEP
6144:oeoPe2MUyB7MufwV4oHs7hoawfLN51gZJCfIgmLduezWSnmUbN9l8fPTJuzBvnbj:tye2MjBxfSLLXygOpWS6fLJuzdbj
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3876 4752 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\acd43c3378512da7c13429be49190a23.exe"C:\Users\Admin\AppData\Local\Temp\acd43c3378512da7c13429be49190a23.exe"1⤵PID:4752
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4752 -s 4482⤵
- Program crash
PID:3876
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4752 -ip 47521⤵PID:2228