Analysis
-
max time kernel
120s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 08:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5e1f4550ef34c7dc253b46f7dd5655ea.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5e1f4550ef34c7dc253b46f7dd5655ea.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
5e1f4550ef34c7dc253b46f7dd5655ea.exe
-
Size
144KB
-
MD5
5e1f4550ef34c7dc253b46f7dd5655ea
-
SHA1
f3a9a8265d279ec28811c04cc77f2b32f972c9c6
-
SHA256
a218e7cd3a795b0f8f62a8c81349a6d7bf69d4bfa6c5f2bbae2dea59ef15101d
-
SHA512
540829d41440d9c055f006f7239f9bcbeffecad83f5958269ea4a88300459fe6aba64b9cbcf0e07e4085620bebfdd91777ac2f6b094a7ab090eb9f86064def41
-
SSDEEP
3072:V7GeKlH3SvQ0tRpSFsOTHHrdT+cT3B0DBpq7qZ2o2LlmSbReH:Vvs36HMZHkDBZZ2bLlm
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3768 3104 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e1f4550ef34c7dc253b46f7dd5655ea.exe"C:\Users\Admin\AppData\Local\Temp\5e1f4550ef34c7dc253b46f7dd5655ea.exe"1⤵PID:3104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3104 -s 2922⤵
- Program crash
PID:3768
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3104 -ip 31041⤵PID:3712