Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 08:27
Static task
static1
Behavioral task
behavioral1
Sample
5fc74d1f246689d753a7917b9a55bc5f.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5fc74d1f246689d753a7917b9a55bc5f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
5fc74d1f246689d753a7917b9a55bc5f.exe
-
Size
1.2MB
-
MD5
5fc74d1f246689d753a7917b9a55bc5f
-
SHA1
e047cdc7d175f6130ebe70b9fd1d46ab547142fb
-
SHA256
100d12f11e906f257c147854dd557bd8875798aeb832e3a50fa3e6f1a1f16706
-
SHA512
e96f2bcf201f53451a9248592ddb4cef51203d5ca5dc3fa43e1eb613ce68f026ef4031da96083a01216ed64ac785bdfb41774ef710e0686712713dcd7a516dbb
-
SSDEEP
24576:y2IB/ax+5OKAoI2RB0Xl0dH/GehXW89Vh8ZkWEJvbOSwwSYs1wHjrGf18NTx:ylV5SoIU010dHbRZfh8GWEJv6dwDifeF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1936 1888 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\5fc74d1f246689d753a7917b9a55bc5f.exe"C:\Users\Admin\AppData\Local\Temp\5fc74d1f246689d753a7917b9a55bc5f.exe"1⤵PID:1888
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1888 -s 4842⤵
- Program crash
PID:1936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 1888 -ip 18881⤵PID:3204