Analysis
-
max time kernel
145s -
max time network
110s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 21:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
04db2340ed0a07b78b57854c98852c96.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
04db2340ed0a07b78b57854c98852c96.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
04db2340ed0a07b78b57854c98852c96.exe
-
Size
73KB
-
MD5
04db2340ed0a07b78b57854c98852c96
-
SHA1
35f6a1a4acf48ce777e3aaa9cf24efa86e0a3a8a
-
SHA256
9f55e3a5ecabbfbe068d2d9777942118f748b984fa659cbbf17278c3c70846ef
-
SHA512
7592ba408faa044aa11cef2d73896e5aebf4ee52ede88daf8343c3eb53404806faaa94d783838c6c0c3093d17c61ec8330d127a6fc852653e3c3512cab7ca1ee
-
SSDEEP
1536:E6y9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqa9AAPlhU6:Wg2Ya3I4nafC83ofur6MD93lhF
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4056 3128 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\04db2340ed0a07b78b57854c98852c96.exe"C:\Users\Admin\AppData\Local\Temp\04db2340ed0a07b78b57854c98852c96.exe"1⤵PID:3128
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3128 -s 3482⤵
- Program crash
PID:4056
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 3128 -ip 31281⤵PID:4240