Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 13:33
Static task
static1
Behavioral task
behavioral1
Sample
72a6d54cceff139fdc623e1faded1d2a.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
72a6d54cceff139fdc623e1faded1d2a.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
72a6d54cceff139fdc623e1faded1d2a.exe
-
Size
799KB
-
MD5
72a6d54cceff139fdc623e1faded1d2a
-
SHA1
a5f7cae87a4e833207a4372474bda2177e07523e
-
SHA256
153d19e51215582d3fc6bb7d91b02b08997a2d7753ee482071ab75b2d7f5c484
-
SHA512
bb6446dd2f0740f71d5526df49ea601549288099134d07f90b021ce0f3d7a78ec55999eea46b12d9b1316be1b2205ae828bb9b447463a850ba9990d2075011a5
-
SSDEEP
12288:uEuG0LV7tukQf4YHJxfOHGpTLfzzzi/XvnGNYJfwT2+pHTEd:uEuNpwkXiJx2HGpjMPic8NTe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2144 1536 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\72a6d54cceff139fdc623e1faded1d2a.exe"C:\Users\Admin\AppData\Local\Temp\72a6d54cceff139fdc623e1faded1d2a.exe"1⤵PID:1536
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1536 -s 4602⤵
- Program crash
PID:2144
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1536 -ip 15361⤵PID:1816