Analysis
-
max time kernel
95s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 19:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01e93179d45a85ae8e88eb0dc78e90cf.exe
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
01e93179d45a85ae8e88eb0dc78e90cf.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
01e93179d45a85ae8e88eb0dc78e90cf.exe
-
Size
114KB
-
MD5
01e93179d45a85ae8e88eb0dc78e90cf
-
SHA1
8c7207b5fbabe284ba0e080f1d73061a4ce0c294
-
SHA256
b072d29bae0d53dfd1a70bc48cacc559535020d6e2b2039f8acdd53fe22053b9
-
SHA512
0658da2ee6965e992542312a7b80a486403659dc0a42b4efa9b8239aa4ef69eec16c072ec08db50fa01dcecbee6953ef0fda056c998df349d29652dcf336cfff
-
SSDEEP
3072:TtcIf1MhEYUla/VKZqDPJ9ZtpJgptHVMCd:JcISEq0qLRJg3Vdd
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1256 3164 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\01e93179d45a85ae8e88eb0dc78e90cf.exe"C:\Users\Admin\AppData\Local\Temp\01e93179d45a85ae8e88eb0dc78e90cf.exe"1⤵PID:3164
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3164 -s 7242⤵
- Program crash
PID:1256
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 3164 -ip 31641⤵PID:1216