Analysis
-
max time kernel
113s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 06:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5a55732062febd3add8691886c6a6f5e.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a55732062febd3add8691886c6a6f5e.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5a55732062febd3add8691886c6a6f5e.exe
-
Size
19KB
-
MD5
5a55732062febd3add8691886c6a6f5e
-
SHA1
3c034b254270d4f267041fd525d81562f74aa7bb
-
SHA256
e22e45b410de2b98bc9cfad0ed6bad0c2f62a4a6402cf08d384a44fc45286a80
-
SHA512
9a0eeac71b5c85588234b9897c2cd1db5b9dbee4daecd1e27ad7349837d571da502ca74ef4427e627d1a27f7c791c229ae19da95ab89b69c4ef343e7dabb7341
-
SSDEEP
384:XlNlNDHe1cKkGn4FXEM5c1RfweMutEQ4tjPCD3WLO8K9T2m:fnK1csn2XEM5MRAoEJ83cK9p
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2212 2768 WerFault.exe 53 4676 2768 WerFault.exe 53
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a55732062febd3add8691886c6a6f5e.exe"C:\Users\Admin\AppData\Local\Temp\5a55732062febd3add8691886c6a6f5e.exe"1⤵PID:2768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 1922⤵
- Program crash
PID:2212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2768 -s 2242⤵
- Program crash
PID:4676
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2768 -ip 27681⤵PID:1264
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 2768 -ip 27681⤵PID:1856