Analysis
-
max time kernel
148s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 21:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ca374274e2e33052c26f9296109d37e.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3ca374274e2e33052c26f9296109d37e.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
3ca374274e2e33052c26f9296109d37e.exe
-
Size
321KB
-
MD5
3ca374274e2e33052c26f9296109d37e
-
SHA1
ebdd4d9f01cd95e504617ec7b2c49716d30cde9c
-
SHA256
ee7d6d15812a27c12c49354ac04c8467e0135a192b44eaa676e9e56f1cb8466e
-
SHA512
cc831a110f6d2bd3708fa311a900727e311688fc5fd8444ba712cde72efb8cfbc7f1f2452896c19d5c3ac0323b7b05f82a46775d51ff9367c50726e28d1a7252
-
SSDEEP
6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3124 2264 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ca374274e2e33052c26f9296109d37e.exe"C:\Users\Admin\AppData\Local\Temp\3ca374274e2e33052c26f9296109d37e.exe"1⤵PID:2264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2264 -s 3322⤵
- Program crash
PID:3124
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2264 -ip 22641⤵PID:4484