Analysis
-
max time kernel
147s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 13:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
70c7ddb8cccfa4c0a58b2b03de8d4f1e.exe
Resource
win7-20231215-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
70c7ddb8cccfa4c0a58b2b03de8d4f1e.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
70c7ddb8cccfa4c0a58b2b03de8d4f1e.exe
-
Size
45KB
-
MD5
70c7ddb8cccfa4c0a58b2b03de8d4f1e
-
SHA1
7c444fd0636de86ee6c79a939e61e8749b25e421
-
SHA256
9d7d92d81e479fa2611e0f7c51646827ba712d9d287e8fc3c54895c08e1b7c2f
-
SHA512
64ebaf9c02077145666731b16b1ea2dba689fb29fc990bcbd74a53e30912e1f6c7357245b60d5a110fc7e49eb69bd0bef9bb5f1c0b3a076026e2300c1af526a9
-
SSDEEP
768:5w1md/3gGa+R3v+JNe+mP4jB/4ZFTMb1iv6w00uMgAyuRy4N/:55qGlRGNjmP4jBA3MbUv1/t/yI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2028 2120 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\70c7ddb8cccfa4c0a58b2b03de8d4f1e.exe"C:\Users\Admin\AppData\Local\Temp\70c7ddb8cccfa4c0a58b2b03de8d4f1e.exe"1⤵PID:2120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 5122⤵
- Program crash
PID:2028
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2120 -ip 21201⤵PID:4752