Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 19:19
Static task
static1
Behavioral task
behavioral1
Sample
376242caa738f098299f65b08d0feef8.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
376242caa738f098299f65b08d0feef8.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
376242caa738f098299f65b08d0feef8.exe
-
Size
678KB
-
MD5
376242caa738f098299f65b08d0feef8
-
SHA1
426afc4e358f72910a496ed15d473719cd2fb717
-
SHA256
06ab9ee2528ab1ba2d2895e29aeac431a719fe28a6ea67e59a19880b7234ec21
-
SHA512
265c7bfc5f7eacdd3ba0e20a4e0a9ee4cfc17db708bc04ac594d009eb7ddbcc6cd9666d49ff3ea47cfbadb37117068b57246e81fdd29aaa388c549114d062f13
-
SSDEEP
12288:zxtGtpbjAsP/5xw7f+Az9Z25pkK+reWZCA5XqWUCxDHY192w+iI3KjZfC6pKckN8:zxtcFVsC46pMq6CcjJHY19rZfvpK2C1g
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2744 3648 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\376242caa738f098299f65b08d0feef8.exe"C:\Users\Admin\AppData\Local\Temp\376242caa738f098299f65b08d0feef8.exe"1⤵PID:3648
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3648 -s 4922⤵
- Program crash
PID:2744
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3648 -ip 36481⤵PID:3804