Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 08:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
136c227251affdaf4c380c5a75677642.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
136c227251affdaf4c380c5a75677642.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
136c227251affdaf4c380c5a75677642.exe
-
Size
111KB
-
MD5
136c227251affdaf4c380c5a75677642
-
SHA1
0d88ea8e0e31bd55889a0e1f4ca7572698ffded4
-
SHA256
a1ae6393e7a03451837298652edffe206138570e5b67b29677fed624c563296a
-
SHA512
7a7f96f621bc8b391dcdc15d6c77789a87589926721c219c2ba04e9c8ac8f76310b7504ee84c62a71159ca12aba76928524ba957c9457af565af1172eb45a056
-
SSDEEP
1536:lz0FiAmV27inmrPw6vo4CKPSRoPpCoOsbR7kD+7aty4lYLKIwI+:CFGHSTaKKRabJkD+mpCLK/r
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 656 4900 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\136c227251affdaf4c380c5a75677642.exe"C:\Users\Admin\AppData\Local\Temp\136c227251affdaf4c380c5a75677642.exe"1⤵PID:4900
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4900 -s 4882⤵
- Program crash
PID:656
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 4900 -ip 49001⤵PID:1540