Analysis
-
max time kernel
146s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 00:05
Static task
static1
Behavioral task
behavioral1
Sample
451e78ee3d4d18215dbd0d82e3080167.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
451e78ee3d4d18215dbd0d82e3080167.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
451e78ee3d4d18215dbd0d82e3080167.exe
-
Size
739KB
-
MD5
451e78ee3d4d18215dbd0d82e3080167
-
SHA1
d397166f36de439e0ec2efd4bd542e3da40d6865
-
SHA256
144472fec4bd9ac296fd4c7fa57c340656816c4cd0a4f6ca30165c26c97380ae
-
SHA512
1b5023c50052252fea98bf12906e0f71711acb1c9f212d297c8807bdf6db8902cc043e34464ec1f349cf472f3447bd13b405ae3e2e44706c8d19d6a87f96fac4
-
SSDEEP
12288:anVGevgTCwarlfe5ROANbtGDPNsKBCInxbvFO+C2leOhhFDaBrqKlHKACAvbyHZJ:anVTFYBtGDP1CInxhCg13pKEuKAa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4624 3332 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\451e78ee3d4d18215dbd0d82e3080167.exe"C:\Users\Admin\AppData\Local\Temp\451e78ee3d4d18215dbd0d82e3080167.exe"1⤵PID:3332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 4842⤵
- Program crash
PID:4624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3332 -ip 33321⤵PID:5008