Analysis
-
max time kernel
164s -
max time network
80s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1c31aed1accaf94322bfddd4d9949769.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1c31aed1accaf94322bfddd4d9949769.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1c31aed1accaf94322bfddd4d9949769.exe
-
Size
55KB
-
MD5
1c31aed1accaf94322bfddd4d9949769
-
SHA1
58ae5ba483de4e1c7d32c48795f8493ebf357dda
-
SHA256
971ee4b86d6b0c42360078b8a2df8bab7c104cdf805e0146d8cacd61adbdedbe
-
SHA512
711234879b71e224677e5bdb1a8cb5f9defe56f783496ab7ece8b06f70d552e3c3db50c393ee29a6c0abacba82fbc0a544ccdd60157cc01516b89a473dab25ec
-
SSDEEP
1536:AkE6HH/zwudqyOWjOAFBPVoQisWibVUXliLFXCe:pnbwudBXOAFBPVoQisWiRoluFXl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4600 2760 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c31aed1accaf94322bfddd4d9949769.exe"C:\Users\Admin\AppData\Local\Temp\1c31aed1accaf94322bfddd4d9949769.exe"1⤵PID:2760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2760 -s 4002⤵
- Program crash
PID:4600
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2760 -ip 27601⤵PID:464