Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 06:06
Static task
static1
Behavioral task
behavioral1
Sample
0a554cd910da8371697aba9ea5806e64.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a554cd910da8371697aba9ea5806e64.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0a554cd910da8371697aba9ea5806e64.exe
-
Size
777KB
-
MD5
0a554cd910da8371697aba9ea5806e64
-
SHA1
3f4b1446002126718593958e3a0eccfc2501c4e8
-
SHA256
11ea23aa3b08b6c63081e33f574f44ac94949361433f10405cd0b05104e9b788
-
SHA512
7de9d125f0be755e9fdbb02f0bfa523d6c8a76a2415130aedd6a105f4827bdacbbbcb6d5f8d2cceb16cabc2b851bc71704a0477e19c2b00a3aacf1b03e572fdb
-
SSDEEP
24576:a0QQiDVbHQv14Bsk33+S8XT5uc4hffELlIrkh:afQihbHI14Bb78XTJ4hnEokh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2068 2072 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a554cd910da8371697aba9ea5806e64.exe"C:\Users\Admin\AppData\Local\Temp\0a554cd910da8371697aba9ea5806e64.exe"1⤵PID:2072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2072 -s 4842⤵
- Program crash
PID:2068
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 2072 -ip 20721⤵PID:936