Analysis
-
max time kernel
143s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 08:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6184f2589bf6b81a389ae688d028dba8.exe
Resource
win7-20231215-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
6184f2589bf6b81a389ae688d028dba8.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6184f2589bf6b81a389ae688d028dba8.exe
-
Size
382KB
-
MD5
6184f2589bf6b81a389ae688d028dba8
-
SHA1
432080f46940a95b0224e0c9f1e645e5752d9774
-
SHA256
03eda151750779f6f6ff684089dc1be37e5c3541c33e170f6f781afc8f8e5744
-
SHA512
43fb82cbf96de16fb4e34ae1c67ecf180d921d997a5f9f05c9b7dab3bb1827fa3072b17d018f9934118162bd1e17be4aefa788c7b10b69087de03b0f09c0d689
-
SSDEEP
6144:uU9BhpRMi6y4+AGeJKiIdDjky49jypOAEWZqnKET5EIyLjRKg1gXVJiObl:HrpRMipAGliLy8hAEWZ+7TSHRKSgFBl
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4464 3452 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\6184f2589bf6b81a389ae688d028dba8.exe"C:\Users\Admin\AppData\Local\Temp\6184f2589bf6b81a389ae688d028dba8.exe"1⤵PID:3452
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3452 -s 4122⤵
- Program crash
PID:4464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3452 -ip 34521⤵PID:4000