Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 19:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
373bf08038de9a7cddd49186833c5cbc.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
373bf08038de9a7cddd49186833c5cbc.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
373bf08038de9a7cddd49186833c5cbc.exe
-
Size
136KB
-
MD5
373bf08038de9a7cddd49186833c5cbc
-
SHA1
98dda61783907c00a8e95d4d8994b045b9a17a14
-
SHA256
e65bf2e37da98c948996fd92cb9bc98d8afe300b3c7d4b85e0274c82e400d76b
-
SHA512
c3a690d196e0f1d27fdea51ad1a25256d121c31d46fe271f9128ab1679bb8eb4000ef739ce87a1b47998c9f36baba069f093e1aa820a775449f891d978d47bd5
-
SSDEEP
3072:h1L9X96XWLZLpvdh2Hh2VPL9I/AaRSoHLp4fN4CPF+1:KSNvdhG2+SpHF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3212 3904 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\373bf08038de9a7cddd49186833c5cbc.exe"C:\Users\Admin\AppData\Local\Temp\373bf08038de9a7cddd49186833c5cbc.exe"1⤵PID:3904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3904 -s 2322⤵
- Program crash
PID:3212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3904 -ip 39041⤵PID:864