Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 11:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
69f20aaad4be0bb2ad4034d3df41b3a0.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
69f20aaad4be0bb2ad4034d3df41b3a0.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
69f20aaad4be0bb2ad4034d3df41b3a0.exe
-
Size
904KB
-
MD5
69f20aaad4be0bb2ad4034d3df41b3a0
-
SHA1
11c0df07100b417e71ccb728cce81f161f3ae556
-
SHA256
dde882918a7f9989bd70ba3f8d15f6e8086318e20c32bf08c3b8ede22fdc1606
-
SHA512
2b1f1fa3a38a45469ba0e1fb2b2758c096af12164494369815fcd37951684054b5450f58b9bcd0e00538586e3ea489aa59fe87c0cc955c2123944073e0751ffc
-
SSDEEP
3072:ft2cWtTBfVkfqM2SCAygRjlIqZoFzJcqIUv:hWtTBdsqEPxjjoFz5v
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 452 448 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\69f20aaad4be0bb2ad4034d3df41b3a0.exe"C:\Users\Admin\AppData\Local\Temp\69f20aaad4be0bb2ad4034d3df41b3a0.exe"1⤵PID:448
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 448 -s 2162⤵
- Program crash
PID:452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 448 -ip 4481⤵PID:3224