Analysis
-
max time kernel
146s -
max time network
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28/12/2023, 22:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fe4495a9c53efcfd33b889ec7b9911a5.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fe4495a9c53efcfd33b889ec7b9911a5.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
fe4495a9c53efcfd33b889ec7b9911a5.exe
-
Size
432KB
-
MD5
fe4495a9c53efcfd33b889ec7b9911a5
-
SHA1
ae0bdfe44d3fa3efb30f7a6204ab975d0cd2d4e6
-
SHA256
e5e349f71fc10aabe967ccd0ff92011d735b9f3b6dce5cdb0d236e60434b874f
-
SHA512
49ac84b8233522ace1b322494316cb1d20d97857de3d4af0877315dad26388d8f9fe557b30617ae3686cefded3f5a5661e2c9f19a427474722c06d3a16a29242
-
SSDEEP
6144:fHk6/AxSQnytdpTSlLFlUbasKdmOsM7yZ4l49QI4M1cd8cH/5IfGekJVe3iu:HQnytOlZlUbataqI4MG8cfzJVe/
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2780 8 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\fe4495a9c53efcfd33b889ec7b9911a5.exe"C:\Users\Admin\AppData\Local\Temp\fe4495a9c53efcfd33b889ec7b9911a5.exe"1⤵PID:8
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 8 -s 2242⤵
- Program crash
PID:2780
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 8 -ip 81⤵PID:1704