Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 20:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a8f01ba5a4f40c3ecf4e51a743497de.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a8f01ba5a4f40c3ecf4e51a743497de.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
3a8f01ba5a4f40c3ecf4e51a743497de.exe
-
Size
233KB
-
MD5
3a8f01ba5a4f40c3ecf4e51a743497de
-
SHA1
1a4aba63d290810e00901f5addb99750e9625038
-
SHA256
84dc6b115b78873b6cbd9b8063b0e7e33de841195a9bef4a8954982df75e99da
-
SHA512
d2c4b78f27f796ed96f31f71c5e2b440ed61472b187c18effb12770bc3f24492572e7fc3126d70814e24b47c73f087ec47bf67c1e40ff4142359a7afabe80e4a
-
SSDEEP
6144:OaWfDkCk3yPobrt0gmu4vBDpFEVKZ7q3FEmboRFGRw8:dyhYeobVOvBNuoGsRFGm8
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3040 1656 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a8f01ba5a4f40c3ecf4e51a743497de.exe"C:\Users\Admin\AppData\Local\Temp\3a8f01ba5a4f40c3ecf4e51a743497de.exe"1⤵PID:1656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1656 -s 3482⤵
- Program crash
PID:3040
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1656 -ip 16561⤵PID:1760