Analysis
-
max time kernel
138s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 09:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6215acdf5b60484557729fbcd8b0c98b.exe
Resource
win7-20231129-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6215acdf5b60484557729fbcd8b0c98b.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6215acdf5b60484557729fbcd8b0c98b.exe
-
Size
88KB
-
MD5
6215acdf5b60484557729fbcd8b0c98b
-
SHA1
5cb668b9703613c0d16072153af0bd74c0187efb
-
SHA256
4c3f0c6d45f755933775504d5d6ab8f4d54cadcdd6af1a31a69eb3241cd9e541
-
SHA512
60ad93c4dc52fe2e3b7b402dbf28d1979eec2c6a29c9f7350ec5b6d5fc86a9b4cd6f61f82c0ccb294492a0b2406cd158063ed2b958238579ec1b1f22444e9ec5
-
SSDEEP
1536:tMTXfnXzKiPivckT7aNxhBs+BTf8o5VkJDjCCGzJkXN5:ynDFavPT70xhBs+9fvaHGzJk95
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3080 3332 WerFault.exe 72
Processes
-
C:\Users\Admin\AppData\Local\Temp\6215acdf5b60484557729fbcd8b0c98b.exe"C:\Users\Admin\AppData\Local\Temp\6215acdf5b60484557729fbcd8b0c98b.exe"1⤵PID:3332
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3332 -s 2242⤵
- Program crash
PID:3080
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3332 -ip 33321⤵PID:1648