Analysis
-
max time kernel
141s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 10:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1657c27fa85ab574d804c977ee39a690.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1657c27fa85ab574d804c977ee39a690.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1657c27fa85ab574d804c977ee39a690.exe
-
Size
124KB
-
MD5
1657c27fa85ab574d804c977ee39a690
-
SHA1
25779481789aefb89ee61e3637c465fa5983bf2b
-
SHA256
c6152f299acb0a14f99ed86ea57088430476a57971ecad923e33f96d5b9946d7
-
SHA512
44d8cd97b5be83497ade5138dd475ed405465dde338cb8e49f724bf797d066032cffca3415939303386a949caf6b6cf0dda49281df2b613cc3fb681b7dd5de30
-
SSDEEP
3072:w49CbjfTyEr/5QDrlWWWGLLN7gGX8Svas2lVYTMYL:pYbbTZrhKxWWWG8tlVYTMYL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2464 3276 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\1657c27fa85ab574d804c977ee39a690.exe"C:\Users\Admin\AppData\Local\Temp\1657c27fa85ab574d804c977ee39a690.exe"1⤵PID:3276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3276 -s 2762⤵
- Program crash
PID:2464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 3276 -ip 32761⤵PID:1336