Analysis
-
max time kernel
139s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 14:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
002eb7cd4011908570fff2abcbbd03f9.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
002eb7cd4011908570fff2abcbbd03f9.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
002eb7cd4011908570fff2abcbbd03f9.exe
-
Size
225KB
-
MD5
002eb7cd4011908570fff2abcbbd03f9
-
SHA1
16ecd2dd2dcda5776f858c6189ac45924b1b9545
-
SHA256
c752a5366c6a18c80b7e8cf9dbbd006c70f44b1f5264a655f46714c88d300bf0
-
SHA512
d38f35b38c085241f802d9d140bfd32f882765735fec268f4c14e1e9edc3ba58c456f2853fd50300e9e5109aca94360ed561c87e3e34bc48c022155a9ded24d9
-
SSDEEP
6144:NogMB9vsB7QNZEYdqgkOdfDXAkE/6rLCC17:NuWQ5dLuk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1248 2540 WerFault.exe 58
Processes
-
C:\Users\Admin\AppData\Local\Temp\002eb7cd4011908570fff2abcbbd03f9.exe"C:\Users\Admin\AppData\Local\Temp\002eb7cd4011908570fff2abcbbd03f9.exe"1⤵PID:2540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2540 -s 2322⤵
- Program crash
PID:1248
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2540 -ip 25401⤵PID:4564