Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 18:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a32c55d7ca2a5929838342e139f9d7e.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a32c55d7ca2a5929838342e139f9d7e.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0a32c55d7ca2a5929838342e139f9d7e.exe
-
Size
609KB
-
MD5
0a32c55d7ca2a5929838342e139f9d7e
-
SHA1
df3c5a922a9d731308eb58ce62b9f8e7dd48aa57
-
SHA256
135d6ba266fd6232927f2859f499d0f68a68d9248b4abd6d47ccdf4071dae4b4
-
SHA512
394e7bef1a96756cfcf481ba87520a9007c71e4eb657126744bcdd77d407678919f4abc4c0e3ce44fa3684d4850115200546142fbd7b1bdd33daa58cfe698b22
-
SSDEEP
12288:WKqMmoNiZiJrAkg+eecZE6nPMzHS5VnDwvFNFVXGhK1VqejEdkGE2zzATfWRZqUf:WKqMmodg+eLZE6nP4HeVSjGhK1VqeIA4
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1952 4964 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a32c55d7ca2a5929838342e139f9d7e.exe"C:\Users\Admin\AppData\Local\Temp\0a32c55d7ca2a5929838342e139f9d7e.exe"1⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 4802⤵
- Program crash
PID:1952
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4964 -ip 49641⤵PID:3492