Analysis
-
max time kernel
91s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
24-12-2023 19:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0cfa92bc4298d124b373f87307ec88ef.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0cfa92bc4298d124b373f87307ec88ef.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0cfa92bc4298d124b373f87307ec88ef.exe
-
Size
368KB
-
MD5
0cfa92bc4298d124b373f87307ec88ef
-
SHA1
d5897b50569c8d9d07d84151e5f43899ce72897c
-
SHA256
b8da6ceb7020992af6a63829e11acaa61b163d3aca81ecdea449f3e517be1ac4
-
SHA512
25d1e6b2d5d45277d69e2a7041900dbc870ca10fbf69902dadcb83f1ce98a109ce91de7ed511c123f5fb9f95c3b37d2d34c4e1d7e2799516dcdd60935e9c660d
-
SSDEEP
6144:RTAp4naqm5GR/0N4Ftn6vicI8qtQQenKDFujBeqSDgzB8jk3E:R041m5Q/0N4L9xYus1NSD2Cg3E
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1092 4956 WerFault.exe 88 2816 4956 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\0cfa92bc4298d124b373f87307ec88ef.exe"C:\Users\Admin\AppData\Local\Temp\0cfa92bc4298d124b373f87307ec88ef.exe"1⤵PID:4956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 3242⤵
- Program crash
PID:1092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4956 -s 3642⤵
- Program crash
PID:2816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4956 -ip 49561⤵PID:396
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 4956 -ip 49561⤵PID:2836