Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
26/12/2023, 07:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5dce7de1050e47c346aab36fdadcbcd9.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5dce7de1050e47c346aab36fdadcbcd9.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 5dce7de1050e47c346aab36fdadcbcd9.exe
- Size 92KB
- Sample231226-jsjq4sebem
- SHA256 e9d2894b90ad4f75c4ed228ccd05180e15deda9215369b52ffb7ee113cd3ea96
- MD5 5dce7de1050e47c346aab36fdadcbcd9
- SHA1 8649b31f3da668dc90a2632e1f4880c0ee7c63d2
- SHA512 e20ad7e8dc072f2b1be31d4f6bb8a2940692f78feedb848c13b0f86087a88b40ce3cec4eee5bd321b049201ad179c1ea19f54af1242fb71732a2fb7f3d167116
- SSDEEP 1536:l7bXnxj12Vd2/Ep3eEgaJyuVDbt9PAdKP/2Po7TEPxKLD0W:l7b3xnMeEgDWDqC0W
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 3004 3272 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\5dce7de1050e47c346aab36fdadcbcd9.exe"C:\Users\Admin\AppData\Local\Temp\5dce7de1050e47c346aab36fdadcbcd9.exe"1⤵PID:3272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 2162⤵
- Program crash
PID:3004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3272 -ip 32721⤵PID:2676