Analysis
- max time kernel
145s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
26/12/2023, 09:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6275c7926f5eebf99f1541719dc6c5a6.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6275c7926f5eebf99f1541719dc6c5a6.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 6275c7926f5eebf99f1541719dc6c5a6.exe
- Size 24KB
- Sample231226-k4fdhafda9
- SHA256 06e714c6d89f34044e3a90d00ce5c761d54d2b92420c0de6560ea516e0a0d276
- MD5 6275c7926f5eebf99f1541719dc6c5a6
- SHA1 9f142f687fcfa67b722e0672f70e9459e44757d4
- SHA512 7cedfb07b7291c28b2bdcbf165b9a1242a4517a74f1c7974da9ac3d6e7385375f6ecc78f4ac9b6fe1b374c50bb37b36a5bfcb8e6a77462d408b79418c99ce32f
- SSDEEP 384:91ccr+X1O2LH+DMh1mmpR3+CR5vvD1xPVgjoaW95XE4o5px7zZWlAodyQ:8crqBq61Bt0oaW3EHlo9dyQ
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 1020 4864 WerFault.exe 14 1964 4864 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\6275c7926f5eebf99f1541719dc6c5a6.exe"C:\Users\Admin\AppData\Local\Temp\6275c7926f5eebf99f1541719dc6c5a6.exe"1⤵PID:4864
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 2522⤵
- Program crash
PID:1020
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4864 -s 3042⤵
- Program crash
PID:1964
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4864 -ip 48641⤵PID:904
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 4864 -ip 48641⤵PID:1960