Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 03:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0369070fea85197e053c4c7ab64cd2f9.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0369070fea85197e053c4c7ab64cd2f9.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0369070fea85197e053c4c7ab64cd2f9.exe
-
Size
256KB
-
MD5
0369070fea85197e053c4c7ab64cd2f9
-
SHA1
effce44b4b83dde368224dd5f8021f8b8fd80514
-
SHA256
73fd850f2a389ab70ce95f07b166acb278a1d8645fc08d9843272580dafb3963
-
SHA512
885431ecf3e57bd9b120eb51e7dad30b0971190855f1bd171914eadb1abca449e5581090f795005ca8509577c74b255662e422f0ed0c5b577bcbec846acd3406
-
SSDEEP
6144:6vCRIdTzprZaX0DK2Ct2lTi9a2MF38KIUyGs1paVsnLyoIxPJEDFrCW+c7BK3GxC:6vh7kkJyKKH/on4Tx9tm
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4704 4812 WerFault.exe 14 4624 4812 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\0369070fea85197e053c4c7ab64cd2f9.exe"C:\Users\Admin\AppData\Local\Temp\0369070fea85197e053c4c7ab64cd2f9.exe"1⤵PID:4812
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 4722⤵
- Program crash
PID:4704
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4812 -s 4722⤵
- Program crash
PID:4624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4812 -ip 48121⤵PID:2040
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 540 -p 4812 -ip 48121⤵PID:2896