Analysis
-
max time kernel
119s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 06:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
593cf32aef5124ffeb599f3b95205ee7.exe
Resource
win7-20231215-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
593cf32aef5124ffeb599f3b95205ee7.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
593cf32aef5124ffeb599f3b95205ee7.exe
-
Size
39KB
-
MD5
593cf32aef5124ffeb599f3b95205ee7
-
SHA1
e50ecc3460017907ad8c3a341e11eab084c915e2
-
SHA256
bb1587472ce3c277b88840590e755223077f9ef359a72869b354ef2179664719
-
SHA512
7f8f247098a66d0164cfb0daae3374193aa362d832a1160a7487141720629bfee9e7632f0c56dd6cd69940202a191cfe67fdbbad198ef9ebed1c839ee04eea2d
-
SSDEEP
768:MbodXomvtes3YwBvZgV/RYqsU77WVHIWicR41HYcYdD:MsFVtwwBvWhCqswKkJ14cYJ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1928 3004 WerFault.exe 54
Processes
-
C:\Users\Admin\AppData\Local\Temp\593cf32aef5124ffeb599f3b95205ee7.exe"C:\Users\Admin\AppData\Local\Temp\593cf32aef5124ffeb599f3b95205ee7.exe"1⤵PID:3004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3004 -s 5002⤵
- Program crash
PID:1928
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3004 -ip 30041⤵PID:1860