Analysis
-
max time kernel
148s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 14:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0259af72898bb16da9d2aeb3fedaa0e7.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
0259af72898bb16da9d2aeb3fedaa0e7.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0259af72898bb16da9d2aeb3fedaa0e7.exe
-
Size
355KB
-
MD5
0259af72898bb16da9d2aeb3fedaa0e7
-
SHA1
98e3ee6e4e65e2bb64d541281e80e000c0715bb9
-
SHA256
4fb7d7697ef4aa0406590e00b5dde575fd4a569e7a0b415a7e2dacfd68d64d58
-
SHA512
9c78bb1292b78d5e03d4928a70e25569de9ce81c6fa9fd236b3d34ff73de041509c73c13705a64563600667ca7b775ec36e9f2fc7f1e52e5021ae3435bb4722f
-
SSDEEP
6144:EDoZ3fsu8isVVRdB4etHsWDZv8jU2JbcfGxcdbL70ktF/wNJRDQ91LC1s7cO/V+:iVu8iE/B4etZDZvexeLbwbRcbCC7cO
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2884 3544 WerFault.exe 33
Processes
-
C:\Users\Admin\AppData\Local\Temp\0259af72898bb16da9d2aeb3fedaa0e7.exe"C:\Users\Admin\AppData\Local\Temp\0259af72898bb16da9d2aeb3fedaa0e7.exe"1⤵PID:3544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3544 -s 4042⤵
- Program crash
PID:2884
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3544 -ip 35441⤵PID:3104