Analysis
-
max time kernel
141s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 07:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5bbe6364c2c352bb27395d95d9f9b286.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5bbe6364c2c352bb27395d95d9f9b286.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
5bbe6364c2c352bb27395d95d9f9b286.exe
-
Size
4.9MB
-
MD5
5bbe6364c2c352bb27395d95d9f9b286
-
SHA1
e51166736ccac22bc7baa6bd36d0b70c7fa817c9
-
SHA256
8b499e252b3b109649fdbc665cb3cdaad6f9b3cbe1e3e5a2e66e0875d1600d48
-
SHA512
e10b9825345b0015e2a04ad39c78651a9a5ee0f3b471407da70f30d90e38502229deb25474c57e69e2504a1a2dde3847953551e3c49ab7ce5432c46ba5c2ecd3
-
SSDEEP
98304:bsHAsXBewHVYlI0eTjq9MRC5x5wqTlCaZylcx+sjrtdP5x9xULW:bsgRBlI0gjsMgVwqTlCagsz
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3600 3376 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\5bbe6364c2c352bb27395d95d9f9b286.exe"C:\Users\Admin\AppData\Local\Temp\5bbe6364c2c352bb27395d95d9f9b286.exe"1⤵PID:3376
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3376 -s 8722⤵
- Program crash
PID:3600
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3376 -ip 33761⤵PID:1308