Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 22:10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0542f25437573b6523e451301c61876a.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0542f25437573b6523e451301c61876a.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0542f25437573b6523e451301c61876a.exe
-
Size
494KB
-
MD5
0542f25437573b6523e451301c61876a
-
SHA1
d66fd10b11135672464376dc0af673816dcda508
-
SHA256
8ada7bd28c4ce45d2397c2ebaee8fcf6f0e03219c7ce39bd832ebe617bf7eb7a
-
SHA512
adc14a93cb952ce0203f0c432ed76914585d1071b85576ef5eff38fc298645e35ac4fd927733abe4d2898b83d4d7e8e52033d8ac87b0439afc6adf87dc5abb05
-
SSDEEP
12288:f1Ra1rN4wopVauKAxZkhwrRINtTirdorX:fDrp4XAx+hwrRwTEdo
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2228 4940 WerFault.exe 61 2156 4940 WerFault.exe 61
Processes
-
C:\Users\Admin\AppData\Local\Temp\0542f25437573b6523e451301c61876a.exe"C:\Users\Admin\AppData\Local\Temp\0542f25437573b6523e451301c61876a.exe"1⤵PID:4940
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 5162⤵
- Program crash
PID:2228
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4940 -s 5562⤵
- Program crash
PID:2156
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4940 -ip 49401⤵PID:1896
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 4940 -ip 49401⤵PID:1164