Analysis
-
max time kernel
145s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 04:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
54a6711461481ae95a67b9964c147ec0.exe
Resource
win7-20231215-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
54a6711461481ae95a67b9964c147ec0.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
54a6711461481ae95a67b9964c147ec0.exe
-
Size
396KB
-
MD5
54a6711461481ae95a67b9964c147ec0
-
SHA1
808a834290d91a84f4d37bbafaa2c9b2f753e791
-
SHA256
e2fdbc52d24ffa12a73a7eab826b2fd0320beb61a296f226c334e4191703dc5b
-
SHA512
e04b4be7971cce64217af8d042e5202d0a161e568d84918948d1e816ffc15c78f115ebdd1bcd2d76559d1877e2f17d75eb9fcb3d5d7a8c3e5863df54d2de581d
-
SSDEEP
6144:rwXZAb8omi0/G4EfWOYNxRrTbL0mwBmIpFQLrgo2P7jXtAfpJQwuMK21JttVtAHa:rwpAb8oj0POYhwRBXyX2zjXaDHfv1dl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 640 4720 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\54a6711461481ae95a67b9964c147ec0.exe"C:\Users\Admin\AppData\Local\Temp\54a6711461481ae95a67b9964c147ec0.exe"1⤵PID:4720
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4720 -s 2682⤵
- Program crash
PID:640
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4720 -ip 47201⤵PID:2152