Analysis
-
max time kernel
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 23:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
17b43c8b9f7308bb38ba0aafee56dc3b.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
17b43c8b9f7308bb38ba0aafee56dc3b.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
17b43c8b9f7308bb38ba0aafee56dc3b.exe
-
Size
60KB
-
MD5
17b43c8b9f7308bb38ba0aafee56dc3b
-
SHA1
9ea1ea15eb732621869a83c7e0dc91e5a318a60e
-
SHA256
7918e3329612ebedd8b278d26c3437073735819b975da6dac2440a4d509f8236
-
SHA512
b3d02b63c6a90aa841fdb9c8c2896fc97a380e2d0a5390b090bdfb71910f9e85dd7338caac1c97f00910ec226734f600b73bb3a4581076c0986722f3e65a6189
-
SSDEEP
384:/Zr+7aRndCyTMqlWcmQvytNYJn8qFfdP8bLwIPHdyEOR/uC51B4lunbf:hC7mCy4qlpmQSOJnnqkIvEEO1K
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1696 3108 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\17b43c8b9f7308bb38ba0aafee56dc3b.exe"C:\Users\Admin\AppData\Local\Temp\17b43c8b9f7308bb38ba0aafee56dc3b.exe"1⤵PID:3108
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3108 -s 4282⤵
- Program crash
PID:1696
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3108 -ip 31081⤵PID:3816