Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 11:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
196cf019cd44ce1339748c2b02848108.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
196cf019cd44ce1339748c2b02848108.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
196cf019cd44ce1339748c2b02848108.exe
-
Size
34KB
-
MD5
196cf019cd44ce1339748c2b02848108
-
SHA1
dcbff4b8739d75386e89344e42f61823bcc4e699
-
SHA256
4a6ecff88c7b3484ed8aba8d85e32d4bc160f8996e385225b91cb31ff4d9d40c
-
SHA512
083eed319d12b199a87199d3b1cac73657f8f78314cdb5c9f6af0aabc03886fd4d04ecbc20666b3e99e27abb7285caaf3338bea22a61cc160da85de07c175484
-
SSDEEP
768:cxstZlRhNYZpgpuFeR22vo7L3O16Wllg0FOlglglglglglglglTU:cwRhNYZpgpuFeRRw7L66yaWOaaaaaaa+
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1692 3720 WerFault.exe 64
Processes
-
C:\Users\Admin\AppData\Local\Temp\196cf019cd44ce1339748c2b02848108.exe"C:\Users\Admin\AppData\Local\Temp\196cf019cd44ce1339748c2b02848108.exe"1⤵PID:3720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3720 -s 3922⤵
- Program crash
PID:1692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3720 -ip 37201⤵PID:744