Analysis
-
max time kernel
143s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 12:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ce961fa49fc1f22244ee0884e6d3788.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ce961fa49fc1f22244ee0884e6d3788.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1ce961fa49fc1f22244ee0884e6d3788.exe
-
Size
64KB
-
MD5
1ce961fa49fc1f22244ee0884e6d3788
-
SHA1
d37a8e6b0a43c699390d7dc1061f7ee751fb5459
-
SHA256
55d4a5996fe24c8fc8cc5856a810c08c768f8c3867c05b9d71107a013f159024
-
SHA512
74fa7616fa5d56cc8112ec43ed38421bba3a6df63405d4b79826f24c39da589d5cba3019b899f0db761538756d4e8b39aa8e218cb359c257269433305914e6b4
-
SSDEEP
768:+RKlhYM6cmKtbe0OWBFd/S/B26lB35LnUcY3JSqLsOdUu1U+oIhlyz7qPXmpzl6:+RKgcmKtbe0OWBAyV3d4OdKOyzG/Ao
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1564 2352 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1ce961fa49fc1f22244ee0884e6d3788.exe"C:\Users\Admin\AppData\Local\Temp\1ce961fa49fc1f22244ee0884e6d3788.exe"1⤵PID:2352
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2352 -s 3842⤵
- Program crash
PID:1564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2352 -ip 23521⤵PID:3552