Analysis
-
max time kernel
132s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 08:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11eea9949a33caf0be56ba89dda5c6b1.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
11eea9949a33caf0be56ba89dda5c6b1.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
11eea9949a33caf0be56ba89dda5c6b1.exe
-
Size
127KB
-
MD5
11eea9949a33caf0be56ba89dda5c6b1
-
SHA1
2489b4cf77a095b917a4aad99946c6ef1e5e4ba5
-
SHA256
6e125dda2461028f2afd60ca52266dea17803e111faaecd53c80cf0986518171
-
SHA512
14a11e3e535c15b1e7bb68261971a97dc0b1b83106165aa27741484962233f74a4cd9a617009044b5a90d13d2d9efb556c48cc25be15a8d7666fd0474daa5233
-
SSDEEP
3072:PjYPFI+zeOKndRzAlSWc+SeLebsbJ3IQQ0jKNKSfL/U:PEhzNsslSyRagbJ3IQQJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5044 3660 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\11eea9949a33caf0be56ba89dda5c6b1.exe"C:\Users\Admin\AppData\Local\Temp\11eea9949a33caf0be56ba89dda5c6b1.exe"1⤵PID:3660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3660 -s 3002⤵
- Program crash
PID:5044
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 3660 -ip 36601⤵PID:1888