Analysis
-
max time kernel
142s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
24/12/2023, 20:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0fac987ab116d24e193773a426594e17.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0fac987ab116d24e193773a426594e17.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0fac987ab116d24e193773a426594e17.exe
-
Size
25KB
-
MD5
0fac987ab116d24e193773a426594e17
-
SHA1
a7aeeba862275391233b5d7d006c2e410a215dcf
-
SHA256
f8977b57fd24b84e196db5add1326bd671e1431d8efc6ea30e12d4525bf7c76f
-
SHA512
6e7e116b565c01e8a1b4cf45a007a89f0dacacfdcda6b257a12f77bae104d35c41fdd0c80888e5d3096117c511fe59345f397a6b0dc6a237fd781a05e229c89e
-
SSDEEP
384:fpd6fBznoEXfLMZmSBeQzcF0x01SS1gfiULkf4jXPlta3XEC/nx1xglqRWI:qzn7XWmS0QTn+4iY7XPLy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3060 1864 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\0fac987ab116d24e193773a426594e17.exe"C:\Users\Admin\AppData\Local\Temp\0fac987ab116d24e193773a426594e17.exe"1⤵PID:1864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1864 -s 10762⤵
- Program crash
PID:3060
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1864 -ip 18641⤵PID:4516