Analysis
-
max time kernel
152s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 13:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21f53a2305af2c6da092c844383e4c42.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
21f53a2305af2c6da092c844383e4c42.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
21f53a2305af2c6da092c844383e4c42.exe
-
Size
355KB
-
MD5
21f53a2305af2c6da092c844383e4c42
-
SHA1
09f142ed3e53725c96017db2f51152ca70b3ac34
-
SHA256
4b7c58f09770e74d9fe8f0e3769e20b7d7115159ffc5180e6edaafaa9c3284c4
-
SHA512
939b3149e06bd2cba054e43d081b858baf57f45cbad975b81c0d677c51116fe32bff828601639b495c3ad5af2dcb1e47579f9fe324ee368dad0b000b9820296b
-
SSDEEP
6144:9WdrD6qlvLunLeq+W0dXkBNOHNgAH8MnKu+MdACilzEf+dMLhX7WUXm+Rs5:Y/TG7+WUXkBgHNgAcMpxOLfdMLhrW+9w
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2600 4516 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\21f53a2305af2c6da092c844383e4c42.exe"C:\Users\Admin\AppData\Local\Temp\21f53a2305af2c6da092c844383e4c42.exe"1⤵PID:4516
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4516 -s 5602⤵
- Program crash
PID:2600
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 200 -p 4516 -ip 45161⤵PID:3504