Analysis
-
max time kernel
137s -
max time network
81s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 05:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
570936904f7edaa7d114ce8dc0c45a73.exe
Resource
win7-20231215-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
570936904f7edaa7d114ce8dc0c45a73.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
570936904f7edaa7d114ce8dc0c45a73.exe
-
Size
820KB
-
MD5
570936904f7edaa7d114ce8dc0c45a73
-
SHA1
05d493505de32747829414dd2bb8eee5f0f4125e
-
SHA256
6dd13f9824602e7e4d285b0a23a3f9f14ea0e3ff33300dfa316e183d1e7e104e
-
SHA512
281e44289220c18b3f6d5c41f59f996c70e6b2a226a1335b0f881a77c7a1fb3badd5365ea101569de034ba845b01892f61001b2841c09b603d03d47d94553189
-
SSDEEP
12288:JDKxRMfskuYXg9KjIFpeLh1TLa+HjH6+NJ+XukhAbMWYKStR42HojcFRXdt1X:FoRMEkuMUpeF1T+o8XukhkMWHQvRN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4544 4656 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\570936904f7edaa7d114ce8dc0c45a73.exe"C:\Users\Admin\AppData\Local\Temp\570936904f7edaa7d114ce8dc0c45a73.exe"1⤵PID:4656
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4656 -s 4122⤵
- Program crash
PID:4544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4656 -ip 46561⤵PID:1556