Analysis
-
max time kernel
167s -
max time network
183s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 04:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
05a0d1f8f54892cb557c294751724ffb.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
05a0d1f8f54892cb557c294751724ffb.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
05a0d1f8f54892cb557c294751724ffb.exe
-
Size
704KB
-
MD5
05a0d1f8f54892cb557c294751724ffb
-
SHA1
08871cdc0e3638cf5857f89b1268878fb474f546
-
SHA256
79ece71af3d10e52c494015fa7afb9b21eb44b819b377e9c7c7a86df1e095371
-
SHA512
453c38afa5b3d4388eb0ca8cd2cd4cb01bb67e295ad472a5439aab661a2935342c829ac7687ac89e4fa6866bebaf8d09bb759c3300a2996c3c3222d4ce25a952
-
SSDEEP
6144:b6ajyiWz7KXsS5Z5zrTiacQiRcUEg2zeiuNUkWRzt2A0nhMQ//:njyfHShPcLRMgPUki90h1//
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1548 1720 WerFault.exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\05a0d1f8f54892cb557c294751724ffb.exe"C:\Users\Admin\AppData\Local\Temp\05a0d1f8f54892cb557c294751724ffb.exe"1⤵PID:1720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1720 -s 4082⤵
- Program crash
PID:1548
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1720 -ip 17201⤵PID:4524