Analysis
-
max time kernel
145s -
max time network
116s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 08:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
602cf95aad117bffc5a364158326d0ab.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
602cf95aad117bffc5a364158326d0ab.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
602cf95aad117bffc5a364158326d0ab.exe
-
Size
41KB
-
MD5
602cf95aad117bffc5a364158326d0ab
-
SHA1
3c4d7e92e4a0d7c15e2781cef63b6feb3f9ae807
-
SHA256
bf844bc953919e8c54feb8420738e56b313045a54ac63b47c1f66734add3a27a
-
SHA512
e183ecffc0f22feb271ce42436b1f89baa8045bbb6f6d9efa1e8bf24810a999e9ec772b620f886c6f1b59d1edd27674d49d54a4550a7125e67a8d382fbdf8deb
-
SSDEEP
192:xXeUlEacOvVCUA9Fp49ucuGloeTSwEA1r+EX9hW0XnyPhA2k7yiQYbcx9ejtapq:J/ncUIUsFKucNoeTSwvN1Vnq5IQCl
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 3724 4288 WerFault.exe 56 516 4288 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\602cf95aad117bffc5a364158326d0ab.exe"C:\Users\Admin\AppData\Local\Temp\602cf95aad117bffc5a364158326d0ab.exe"1⤵PID:4288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 2202⤵
- Program crash
PID:3724
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4288 -s 2242⤵
- Program crash
PID:516
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4288 -ip 42881⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 4288 -ip 42881⤵PID:436