Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 19:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01a7d23c652d17cbd8f0db7e02bdb78c.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
01a7d23c652d17cbd8f0db7e02bdb78c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
01a7d23c652d17cbd8f0db7e02bdb78c.exe
-
Size
32KB
-
MD5
01a7d23c652d17cbd8f0db7e02bdb78c
-
SHA1
80b187a1c6a97ae62a4d98b3f03b4a08b5fc221b
-
SHA256
2ef7d7d54934e105d5f842326983799ae7f1fc304b1a87c6b306bd58b91c1b4c
-
SHA512
09fe0759b0626c3f181d001e18eef48428d9036174dbb9cfc50b3714a25665ba313f1b25b3ba57cfb1d53636c84b812c9769d1b1f01e525f3893e5c1318520d5
-
SSDEEP
384:aqTqIWiNAZ7wDp/uc5dUygU4f8LDnQTXW79peWcdt:auXRXD4cHUZYD8G
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1464 3252 WerFault.exe 87 3584 3252 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\01a7d23c652d17cbd8f0db7e02bdb78c.exe"C:\Users\Admin\AppData\Local\Temp\01a7d23c652d17cbd8f0db7e02bdb78c.exe"1⤵PID:3252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3252 -s 2402⤵
- Program crash
PID:1464
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3252 -s 2442⤵
- Program crash
PID:3584
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3252 -ip 32521⤵PID:2712
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3252 -ip 32521⤵PID:2172