Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28/12/2023, 22:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fbb1ecd75644a1130ee07d36718df133.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fbb1ecd75644a1130ee07d36718df133.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
fbb1ecd75644a1130ee07d36718df133.exe
-
Size
132KB
-
MD5
fbb1ecd75644a1130ee07d36718df133
-
SHA1
ba128d69c51bed55c37c24e448b08c1eec884dfa
-
SHA256
7fd89b903826433b128ac0c33deef462b976a17b7e6cb2c95a143f11f2ba28c5
-
SHA512
7eb064b48546559e20128af9ea66718f5f2affe395d5485484c000409f67595600525da363645448cf11c041eb93c706b5336dc435290d0a05cfe98d06d1c922
-
SSDEEP
3072:iUXnviYhG8t/LenDkBTDiA6U+3ojGaqnIMBE5VTN/ErRpP4WU4UUdxpK341:tXnvThN/Ln3eU+3opeZu/ErBU4RxU341
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1996 2716 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbb1ecd75644a1130ee07d36718df133.exe"C:\Users\Admin\AppData\Local\Temp\fbb1ecd75644a1130ee07d36718df133.exe"1⤵PID:2716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2716 -s 2682⤵
- Program crash
PID:1996
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2716 -ip 27161⤵PID:4544