Analysis
-
max time kernel
144s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 13:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
206da38006df5c053679594d73c6f62e.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
206da38006df5c053679594d73c6f62e.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
206da38006df5c053679594d73c6f62e.exe
-
Size
261KB
-
MD5
206da38006df5c053679594d73c6f62e
-
SHA1
dff06e0a9d21b609fb9ddec49e4358f9b9b9eef4
-
SHA256
23f9b14fb6c6a4f55b2f88bf44071c9a7f54fad8055436cd748e9bdb3b0608f1
-
SHA512
62a681c0fa28484679b1fa446e83acf23d643700a7ed39e71b48ca7ebbf3d7140d37b379b60e212e00e2d1c43737558ff510c28501b2725af2f45a4d1e85c106
-
SSDEEP
6144:/IKtgJMsT2mgEUGfwPBiSkj8AuKTFLE7porYTx1P+cl/2ugxjV5i:/IKZYqIS00dmsx12clWFVs
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2868 3832 WerFault.exe 21
Processes
-
C:\Users\Admin\AppData\Local\Temp\206da38006df5c053679594d73c6f62e.exe"C:\Users\Admin\AppData\Local\Temp\206da38006df5c053679594d73c6f62e.exe"1⤵PID:3832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3832 -s 2882⤵
- Program crash
PID:2868
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3832 -ip 38321⤵PID:456