Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 21:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ea60e0111578e83c186b1ad74e80d32.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3ea60e0111578e83c186b1ad74e80d32.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
3ea60e0111578e83c186b1ad74e80d32.exe
-
Size
694KB
-
MD5
3ea60e0111578e83c186b1ad74e80d32
-
SHA1
6f65d1323ef34cdef1145f2272e1adb15e0c3680
-
SHA256
23586294c271d9e6ad31e56270a6239f0ae66632a957cc606a4d06ebd3bf09df
-
SHA512
df6d44b06d71ce2cccf6ee208267c291cc0c07423397ca7029093bf10bec089c5a2031e95550f34b2115c6f79f0bcc47717e41d0d2a78f2c13767c2132462597
-
SSDEEP
12288:yraYa++2jceMsX7Hqcfcm53nBRXjIj35c87fr:yv0eMsX7HHD53BR4cY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 208 3744 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ea60e0111578e83c186b1ad74e80d32.exe"C:\Users\Admin\AppData\Local\Temp\3ea60e0111578e83c186b1ad74e80d32.exe"1⤵PID:3744
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3744 -s 4362⤵
- Program crash
PID:208
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3744 -ip 37441⤵PID:1860