Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 07:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5dce7de1050e47c346aab36fdadcbcd9.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5dce7de1050e47c346aab36fdadcbcd9.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
5dce7de1050e47c346aab36fdadcbcd9.exe
-
Size
92KB
-
MD5
5dce7de1050e47c346aab36fdadcbcd9
-
SHA1
8649b31f3da668dc90a2632e1f4880c0ee7c63d2
-
SHA256
e9d2894b90ad4f75c4ed228ccd05180e15deda9215369b52ffb7ee113cd3ea96
-
SHA512
e20ad7e8dc072f2b1be31d4f6bb8a2940692f78feedb848c13b0f86087a88b40ce3cec4eee5bd321b049201ad179c1ea19f54af1242fb71732a2fb7f3d167116
-
SSDEEP
1536:l7bXnxj12Vd2/Ep3eEgaJyuVDbt9PAdKP/2Po7TEPxKLD0W:l7b3xnMeEgDWDqC0W
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3004 3272 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\5dce7de1050e47c346aab36fdadcbcd9.exe"C:\Users\Admin\AppData\Local\Temp\5dce7de1050e47c346aab36fdadcbcd9.exe"1⤵PID:3272
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3272 -s 2162⤵
- Program crash
PID:3004
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3272 -ip 32721⤵PID:2676