Analysis
-
max time kernel
90s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45fcb15134d4e0ebf9363ea0916dbfcf.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
45fcb15134d4e0ebf9363ea0916dbfcf.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
45fcb15134d4e0ebf9363ea0916dbfcf.exe
-
Size
368KB
-
MD5
45fcb15134d4e0ebf9363ea0916dbfcf
-
SHA1
99bb1f31f887f1988a15dc65963299d7ba7f9585
-
SHA256
09b4fb3f263ae3507d3a4e3f1189ef2a8ed39658ec846b6301e648fa1262669e
-
SHA512
bf0c57565a158c8d0cf1a74f74a683d9aa43de75ddb17ad86c8cde9ef1052b335afc0eaf6e8f6a2dcd3679141783a7847acd78bf308f285203e60977d6c25d94
-
SSDEEP
6144:RTAp4naqm5GR/0N4Ftn6vicI8qtQQenKDFujBeqSDgzB8jk3u:R041m5Q/0N4L9xYus1NSD2Cg3u
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2336 4056 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\45fcb15134d4e0ebf9363ea0916dbfcf.exe"C:\Users\Admin\AppData\Local\Temp\45fcb15134d4e0ebf9363ea0916dbfcf.exe"1⤵PID:4056
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4056 -s 3282⤵
- Program crash
PID:2336
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 4056 -ip 40561⤵PID:2676