Analysis
-
max time kernel
94s -
max time network
120s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 21:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3db0134b58678830ad98eb62d80e3d4c.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
3db0134b58678830ad98eb62d80e3d4c.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
3db0134b58678830ad98eb62d80e3d4c.exe
-
Size
1.5MB
-
MD5
3db0134b58678830ad98eb62d80e3d4c
-
SHA1
461896e2108d950ccd3da7df7271e638530da875
-
SHA256
88c982437a755f84f5091de54cb5f0a644e10e3fa584699138b5d37f48d1a7b7
-
SHA512
eb08cbb764fc691c07fc06a23e7e047b20e4c63b3e46dba0630ad180000cf4f483637a8dbf7a8d525ab10568aaf75231c2099d476483b45a3cabb5dfe8d1794b
-
SSDEEP
49152:vVHFXSFEmqiDqCbB1gickVsPTpuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuTuuuO:vVHFXSCmqsdgfkVsNuuuuuuuuuuuuuu+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3516 2952 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\3db0134b58678830ad98eb62d80e3d4c.exe"C:\Users\Admin\AppData\Local\Temp\3db0134b58678830ad98eb62d80e3d4c.exe"1⤵PID:2952
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2952 -s 5202⤵
- Program crash
PID:3516
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2952 -ip 29521⤵PID:4172