Analysis
-
max time kernel
101s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 03:33
Behavioral task
behavioral1
Sample
50a99bf8df5923ae5bbf70652a7bca5d.exe
Resource
win7-20231215-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
50a99bf8df5923ae5bbf70652a7bca5d.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
50a99bf8df5923ae5bbf70652a7bca5d.exe
-
Size
10.2MB
-
MD5
50a99bf8df5923ae5bbf70652a7bca5d
-
SHA1
28de7d338e1e44de8f5341289025d3dfaf19319f
-
SHA256
bd287e1c525b965941aa21441690017d7a39d53f6931cb01bef4fdbe3fa1df36
-
SHA512
0757ff7d491d4fb8ca8403ae318ef880b22e9f9f7e51c289a24ae5dd5517494514ad1993ad0f860a1531ebf72d99f1efc81b499070f3a27fc12a892cb90dcb91
-
SSDEEP
3072:EIXD6t2GloVFwz8BD0cjRTyVwdUE3AZnC69NJ09sTpwl:E3lQwz8BDpWwOUA1C6rTul
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 400 4324 WerFault.exe 19
Processes
-
C:\Users\Admin\AppData\Local\Temp\50a99bf8df5923ae5bbf70652a7bca5d.exe"C:\Users\Admin\AppData\Local\Temp\50a99bf8df5923ae5bbf70652a7bca5d.exe"1⤵PID:4324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 2362⤵
- Program crash
PID:400
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4324 -ip 43241⤵PID:3984