Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
22-12-2023 16:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e676beeb93671a35b283d57ea80fdcf9.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e676beeb93671a35b283d57ea80fdcf9.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
e676beeb93671a35b283d57ea80fdcf9.exe
-
Size
585KB
-
MD5
e676beeb93671a35b283d57ea80fdcf9
-
SHA1
9391088e90b020e28da802c27a1df59dfbcc795f
-
SHA256
7c17e6b91a25282ee44e66692194d69deae97efa3aef86cd1790e892b084c715
-
SHA512
96ea9e53ba7502fd7bf3ed2c2c73c96f89ebb04a5de11690dc62a93a3313ffb689649ac0fd6457a70f3d6ac965314541ceafe2d753f9ab6b4f28bd7d94b7e5a1
-
SSDEEP
3072:jldppufzWZE5ds75hHcK0sVITWHkHcrt3UHcrt3lkRm:j3buf61774crtCcrtOR
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3448 1308 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\e676beeb93671a35b283d57ea80fdcf9.exe"C:\Users\Admin\AppData\Local\Temp\e676beeb93671a35b283d57ea80fdcf9.exe"1⤵PID:1308
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1308 -s 8642⤵
- Program crash
PID:3448
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1308 -ip 13081⤵PID:1360