Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 11:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6bd4585c968812c82ea7838afe3448a2.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
6bd4585c968812c82ea7838afe3448a2.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
6bd4585c968812c82ea7838afe3448a2.exe
-
Size
38KB
-
MD5
6bd4585c968812c82ea7838afe3448a2
-
SHA1
071ed2a71c2ff245f9444567240fe35505e079e5
-
SHA256
249e0851282de63571d458428b82d18d191fcaf5fe7b97941f2a0db0c127c0ef
-
SHA512
8e4e95c2b30b2f5a24d60d09d9b35e385ba2e9b6eecf2ad7f88e82e011a416307b7d86d0cac8643b8e25e0d775d233bbc974819ffc86508390185b437aa54bf1
-
SSDEEP
384:K9oC9jw3gfbF5OhRRuUqGb0sw+dGzCVxGq0HVfT409iGN9FLfNKxZ9:KO2j0UOb0sw+dGz51tnFL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3164 2468 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\6bd4585c968812c82ea7838afe3448a2.exe"C:\Users\Admin\AppData\Local\Temp\6bd4585c968812c82ea7838afe3448a2.exe"1⤵PID:2468
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2468 -s 2242⤵
- Program crash
PID:3164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 2468 -ip 24681⤵PID:4032