Analysis
- max time kernel
6s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
26/12/2023, 23:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
951e010135faf3ca45798525c72604e1.exe
Resource
win7-20231129-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
951e010135faf3ca45798525c72604e1.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 951e010135faf3ca45798525c72604e1.exe
- Size 662KB
- Sample231226-25exssdcg5
- SHA256 632f1076c26e60139620745b9876c89828c782d626122cef3ae1d775381fe79f
- MD5 951e010135faf3ca45798525c72604e1
- SHA1 f106af50aff505166b692d5a8836186a00bee470
- SHA512 4f9fb4f8b6a4fda8d1e1cd2856909cf3f55f016bce0e2da116c3cc58a08616c93ca8ee65af6b773133544087a77a7bf9ceb0d5f8906c47e0284bf9f32f13defa
- SSDEEP 12288:fKRhCuP9R1TeCy9zjVhQN3eMwEK72Yf4ZQPdLdxFVbh8ougIn:GjP9R1TeJ2N3exL72Yf2QPxdy
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2316 3368 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\951e010135faf3ca45798525c72604e1.exe"C:\Users\Admin\AppData\Local\Temp\951e010135faf3ca45798525c72604e1.exe"1⤵PID:3368
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3368 -s 9882⤵
- Program crash
PID:2316
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3368 -ip 33681⤵PID:4400