Analysis
-
max time kernel
132s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 13:32
Static task
static1
Behavioral task
behavioral1
Sample
72a1ee2e52a2d64a67fbc39cc1e54cec.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
72a1ee2e52a2d64a67fbc39cc1e54cec.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
72a1ee2e52a2d64a67fbc39cc1e54cec.exe
-
Size
802KB
-
MD5
72a1ee2e52a2d64a67fbc39cc1e54cec
-
SHA1
fe0b78598b5e7a131e7afec6584949421fecae50
-
SHA256
10b46ef396ef4a0fce80af63aa609997fea8e9bd5c4abf75ab1836e5b1988095
-
SHA512
9ca2abb2ec1a13198ec0ca28dfd461d92d26ad68c0eddf78c2159edec855edd044d9bb17034d6e99a0a02f9c0c52c7b301b7112030a226bcffff9b9c77a3efea
-
SSDEEP
24576:sl1HyqDjLsAwtMsbIVTKLQ6cTAwK0cnApQ51e8NT2:sDHBzTwtPsYMt0f0jpQPK
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3332 4948 WerFault.exe 34
Processes
-
C:\Users\Admin\AppData\Local\Temp\72a1ee2e52a2d64a67fbc39cc1e54cec.exe"C:\Users\Admin\AppData\Local\Temp\72a1ee2e52a2d64a67fbc39cc1e54cec.exe"1⤵PID:4948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4948 -s 4442⤵
- Program crash
PID:3332
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4948 -ip 49481⤵PID:4264