Analysis
-
max time kernel
146s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 23:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06c6bbd1e65b954df4fdea060da2f14a.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
06c6bbd1e65b954df4fdea060da2f14a.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
06c6bbd1e65b954df4fdea060da2f14a.exe
-
Size
334KB
-
MD5
06c6bbd1e65b954df4fdea060da2f14a
-
SHA1
e451d78455f95ecc6d297ace11bee0718774419e
-
SHA256
c6e49c384085d59fe9c128d5a02c9cd042f868de74688a28e7f85e0f4fb97865
-
SHA512
e0fb2a9fdf535b6d21972a711f3ef410ae17670ec127a08d3d0d6bd2b414310d24a3a40a6d561389a933cfc976f89f5c82f16d0562345c9af62a62a7506245a7
-
SSDEEP
6144:LioYZw2wk/D5VB8d9FHn6sLoOJLN3mdXHiZd6FPJlcUWdhD9b1HkEHY4:eoYWkBe/H6sLhdpcXHHzlcUW51EEf
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1624 4088 WerFault.exe 24
Processes
-
C:\Users\Admin\AppData\Local\Temp\06c6bbd1e65b954df4fdea060da2f14a.exe"C:\Users\Admin\AppData\Local\Temp\06c6bbd1e65b954df4fdea060da2f14a.exe"1⤵PID:4088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4088 -s 2242⤵
- Program crash
PID:1624
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 4088 -ip 40881⤵PID:4492