Analysis
-
max time kernel
136s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 17:37
Behavioral task
behavioral1
Sample
3168f4d5cdc232eb6d65f5f2af9c249a.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3168f4d5cdc232eb6d65f5f2af9c249a.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
3168f4d5cdc232eb6d65f5f2af9c249a.exe
-
Size
3.6MB
-
MD5
3168f4d5cdc232eb6d65f5f2af9c249a
-
SHA1
caa8bc43ae9263acb1ab8bbbe2aca1b79b03cfb8
-
SHA256
d39e39d1cab8ed9295f52256df1229997d1f27c7c71939eb29b79cb329a73dc6
-
SHA512
851f969a13eddbf8a58ab41c4f970f0318499e86ff07b9e8b78bc281f00b4ebf76edb55f7d0e1962b230966c2c29f75a97bc7cc3031330b5185e5362732a02c6
-
SSDEEP
49152:zAdGB73ejP3+EMfRdASVaAvrN5Xh602+:zAgR3epMjASHPh
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4604 448 WerFault.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\3168f4d5cdc232eb6d65f5f2af9c249a.exe"C:\Users\Admin\AppData\Local\Temp\3168f4d5cdc232eb6d65f5f2af9c249a.exe"1⤵PID:448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 2762⤵
- Program crash
PID:4604
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 448 -ip 4481⤵PID:3188