Analysis
-
max time kernel
117s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 22:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
055291e9a6142fb6fdd0213c9ba57b18.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
055291e9a6142fb6fdd0213c9ba57b18.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
055291e9a6142fb6fdd0213c9ba57b18.exe
-
Size
365KB
-
MD5
055291e9a6142fb6fdd0213c9ba57b18
-
SHA1
c8e0de1916bebfb2cd6518efc367b11cf806533f
-
SHA256
47e00e1dc33410f7ec570d1686ffd408dd46bc340fb32d9676998579a35b1e2f
-
SHA512
47816ecec7f4bf901824384754ce24b4209baeef827287a00fd1c0e29a4d4de0ef250d7884ec41d02468373e532e5fde901e43f850b41398e70573a6553aaf72
-
SSDEEP
6144:laRMya4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:laRM9x4ojf51aTcK0NEQUd0op3QlL
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2832 1016 WerFault.exe 43
Processes
-
C:\Users\Admin\AppData\Local\Temp\055291e9a6142fb6fdd0213c9ba57b18.exe"C:\Users\Admin\AppData\Local\Temp\055291e9a6142fb6fdd0213c9ba57b18.exe"1⤵PID:1016
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1016 -s 3722⤵
- Program crash
PID:2832
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1016 -ip 10161⤵PID:408