Analysis
-
max time kernel
144s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 11:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1b6b6c39971973172c935c58290d38a3.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1b6b6c39971973172c935c58290d38a3.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1b6b6c39971973172c935c58290d38a3.exe
-
Size
554KB
-
MD5
1b6b6c39971973172c935c58290d38a3
-
SHA1
9ffafd24f0b12c04cd609c5b0a4aa0319ca7ce84
-
SHA256
19d574cea017d613a147b4106ab141a70215482e6673c1a9e10fb8428c2dd9c0
-
SHA512
10207476bd82d15cd039fc2d5c24b00c1ad049874eb417dbcbe19467bd61b8a9a8a3ee048794e943ed6b9eba25f3636d0782ff77ff9df9dd24c70dddf469875f
-
SSDEEP
12288:NI1i6vowvqTY+a7ykGbTIo+acIRNW3IEqojrI+Dzkobzu7h0ONd/xoIRo38tr2/z:NI1z/0f+azE+ou0ONdXRo38fy
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2388 1240 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b6b6c39971973172c935c58290d38a3.exe"C:\Users\Admin\AppData\Local\Temp\1b6b6c39971973172c935c58290d38a3.exe"1⤵PID:1240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1240 -s 2162⤵
- Program crash
PID:2388
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1240 -ip 12401⤵PID:1616