Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 23:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41ca83607c44ed1298b7e1a99f24fd7c.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
41ca83607c44ed1298b7e1a99f24fd7c.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
41ca83607c44ed1298b7e1a99f24fd7c.exe
-
Size
375KB
-
MD5
41ca83607c44ed1298b7e1a99f24fd7c
-
SHA1
da9dd4c834a4792bde71a3d19fe4e476651d031e
-
SHA256
04c2d8ae7a51d09d5ceec4db7befdf48fc9add235b0f9ac75c42b4356f4b2f2d
-
SHA512
7b466fe884d52f2b6f761cbc8240b3a8e772be0c92b0f22b0f93adb1de1bcf383798adad0f41fda26559846ac102b4936f2c44d0820db9a7ab6deb6ea83c8a99
-
SSDEEP
6144:okI63401hQVD+O2ADoaoej8TX0pwJcq+p1n5Km5SoRHrwHxsKtacbhu:NI300VD+O2kdoej8TX0pIfkKm5XR0Hx0
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4520 1212 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\41ca83607c44ed1298b7e1a99f24fd7c.exe"C:\Users\Admin\AppData\Local\Temp\41ca83607c44ed1298b7e1a99f24fd7c.exe"1⤵PID:1212
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1212 -s 3562⤵
- Program crash
PID:4520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1212 -ip 12121⤵PID:3532