Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 20:17
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
02d19b2600efd42887309c58ca717c74.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
02d19b2600efd42887309c58ca717c74.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
02d19b2600efd42887309c58ca717c74.exe
-
Size
126KB
-
MD5
02d19b2600efd42887309c58ca717c74
-
SHA1
37d6c1ab8073f3eb5564e2bc273523ec5f39904b
-
SHA256
9d407d5c70f13e99ef8e5bcd05a116a3fcf86a10cacb958637b44ae48e9d84d6
-
SHA512
a66721aa034803ce8041c629096b824b40f726bbc03c78a788d38548b0c68ded386e2f3352565c2b642ae0a9323dbae16e85b69b06abdc985eb91c074a03e315
-
SSDEEP
3072:Obrl1o8gIClYOMfTgweH0Y+xurOQ3eenxnTsJ+KaMCzOcnd3u:OF1PgISYOMZYuurOQ37xQJ+KazCcU
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4452 5072 WerFault.exe 60
Processes
-
C:\Users\Admin\AppData\Local\Temp\02d19b2600efd42887309c58ca717c74.exe"C:\Users\Admin\AppData\Local\Temp\02d19b2600efd42887309c58ca717c74.exe"1⤵PID:5072
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5072 -s 2322⤵
- Program crash
PID:4452
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 5072 -ip 50721⤵PID:3640