Analysis
-
max time kernel
144s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 08:19
Behavioral task
behavioral1
Sample
5f466358e88a9443157413cdc0603f63.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f466358e88a9443157413cdc0603f63.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5f466358e88a9443157413cdc0603f63.exe
-
Size
419KB
-
MD5
5f466358e88a9443157413cdc0603f63
-
SHA1
5deaa1d79a9ec62ebc0ba9613c74f120a0138e3b
-
SHA256
e7dbe31130efc396dc1c4f08039bc7496d34b32283bdbcb1193553de9fbb91a9
-
SHA512
58a2ced486cc5c16f1913ce6a284ce9365cc83465d9a29ab96c07ba346aeba5ae323289f399394db4bd3d7179b80b513e740b63b822ddeddcaeca5fcfcad4c68
-
SSDEEP
6144:MRUYl1sSFgeDtNmYoRJ1hO9WAJw3FvT2mRjncS0EIhKEeh5lkAe62S4UG5H3+y:qVg8A/OcAuVSEDcJEIAflQ62yG5D
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2764 4064 WerFault.exe 44
Processes
-
C:\Users\Admin\AppData\Local\Temp\5f466358e88a9443157413cdc0603f63.exe"C:\Users\Admin\AppData\Local\Temp\5f466358e88a9443157413cdc0603f63.exe"1⤵PID:4064
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4064 -s 5002⤵
- Program crash
PID:2764
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 448 -p 4064 -ip 40641⤵PID:3304