Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 16:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7b57e8220e409100db28d62031aef7ad.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7b57e8220e409100db28d62031aef7ad.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
7b57e8220e409100db28d62031aef7ad.exe
-
Size
329KB
-
MD5
7b57e8220e409100db28d62031aef7ad
-
SHA1
65543f20269adbd034b90318432a25c7d5c719ac
-
SHA256
176029d6b1cfdb33db38f39ce9461a081982b72ee86a3932e82eeb758ab6f991
-
SHA512
69932d288b9ff5d7db999ab555ec4ddd054b37d9efe861234928b13d353cf4846e510bfa547dccac47e4219e4955f3916cdb848f8756cf71ba153e46e052d233
-
SSDEEP
6144:9NNN+EUQbxcveBwSjsluIpT+6Y79SCvRFT5lRr6E8RwNmRR5Iey:9/cQymBwSjsjpT+6ESCvRx5Hr6E8RwNd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3628 4964 WerFault.exe 53
Processes
-
C:\Users\Admin\AppData\Local\Temp\7b57e8220e409100db28d62031aef7ad.exe"C:\Users\Admin\AppData\Local\Temp\7b57e8220e409100db28d62031aef7ad.exe"1⤵PID:4964
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4964 -s 3322⤵
- Program crash
PID:3628
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4964 -ip 49641⤵PID:3064