Analysis
-
max time kernel
100s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 15:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0342d3191288b62b67b72cc3ddd37c86.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0342d3191288b62b67b72cc3ddd37c86.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
0342d3191288b62b67b72cc3ddd37c86.exe
-
Size
255KB
-
MD5
0342d3191288b62b67b72cc3ddd37c86
-
SHA1
a1a25a0bda79397c112b26b6381ba541d738111e
-
SHA256
e182b7e3581edae5037e0d10c351dcfc12d06801f461f33ab635585f9a0f2227
-
SHA512
917def23ab45e28575fc617ee3c952fa5b1e41f9873c33d129dbbd6c2abb81d6fe3b52e8c6ab9aecc3e1b8efe14ace82fbf2b39435e4931fd0a4188b2c6448b0
-
SSDEEP
6144:Gke9W/sawJNVq4qLBspeYKngBMGtdCikdWblW:qrvVq47Xs6dV+6W
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1468 4804 WerFault.exe 62
Processes
-
C:\Users\Admin\AppData\Local\Temp\0342d3191288b62b67b72cc3ddd37c86.exe"C:\Users\Admin\AppData\Local\Temp\0342d3191288b62b67b72cc3ddd37c86.exe"1⤵PID:4804
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4804 -s 2682⤵
- Program crash
PID:1468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 4804 -ip 48041⤵PID:4936