Analysis
-
max time kernel
148s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 19:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
380086f242c6e178deaac7815ae42f0c.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
380086f242c6e178deaac7815ae42f0c.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
380086f242c6e178deaac7815ae42f0c.exe
-
Size
204KB
-
MD5
380086f242c6e178deaac7815ae42f0c
-
SHA1
2195d3a2726c1383b722ff8ac237587beeb83a8e
-
SHA256
7157fab91a1fdeaef391366b1de476fef3a48dc5dea46b3c72dc73fb7921e142
-
SHA512
f024b417aeeeb39a4ede0fc95f1b854027ca0f420551b6f2a7e26a886c28298a4b7783a3fd52cda862ae10b5f19ad5fedffd7ed54edf87843855e5c84b81e0b9
-
SSDEEP
6144:7rvWnxdAxJ7ZmkCPBXCUNwOf2KvU3M2zCC7:WxdW7Z1CPgOf2J3MQX
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4780 2544 WerFault.exe 16 332 2544 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\380086f242c6e178deaac7815ae42f0c.exe"C:\Users\Admin\AppData\Local\Temp\380086f242c6e178deaac7815ae42f0c.exe"1⤵PID:2544
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 5642⤵
- Program crash
PID:4780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 5642⤵
- Program crash
PID:332
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2544 -ip 25441⤵PID:840
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 2544 -ip 25441⤵PID:316