Analysis
-
max time kernel
150s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 18:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
00e603a2365381652b3f685eed18daa7.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
00e603a2365381652b3f685eed18daa7.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
00e603a2365381652b3f685eed18daa7.exe
-
Size
481KB
-
MD5
00e603a2365381652b3f685eed18daa7
-
SHA1
64c9d783810f8ebff9864d969c3d84db7f96fc30
-
SHA256
7158dacb58afeb5e6971b4e915e8d49b4d2014155cbea90bb91e54d988f3643e
-
SHA512
fc358a2d479855028299eee60a6f893ddc90404c01351635b2ee15e9193e9b9558b2425f3b76d3383e2d9cd0242d003fdf504d0dfa120f9fefc6e4a8ce29645f
-
SSDEEP
12288:XO71QnahHVy6xZDIZLRuIqggbgV/MN26NQQC5Qz+Xi7W5ZGNj1S:Xg5IqgtBC26NdGQzLyZu1S
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2444 3716 WerFault.exe 87 1200 3716 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\00e603a2365381652b3f685eed18daa7.exe"C:\Users\Admin\AppData\Local\Temp\00e603a2365381652b3f685eed18daa7.exe"1⤵PID:3716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 5442⤵
- Program crash
PID:2444
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3716 -s 5442⤵
- Program crash
PID:1200
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3716 -ip 37161⤵PID:1948
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 3716 -ip 37161⤵PID:2476