Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
29/12/2023, 20:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0388678c64e8dcddadb32588082231b3.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0388678c64e8dcddadb32588082231b3.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
0388678c64e8dcddadb32588082231b3.exe
-
Size
196KB
-
MD5
0388678c64e8dcddadb32588082231b3
-
SHA1
9c8bbfe917bb2083038674daf6a9f7800aa872fd
-
SHA256
cc8e9353c1977f1f2793201774de2718c74cbb7d0cde80ba7d870c5ad5329238
-
SHA512
5776eeceebabc36f4318a8dd805a4d5141e728dcfd5d1e7e1ee355fc32969d29bc4f9f1ed3cbe2f4830b812ffaa5ded7de1002aeb83201bc23e32295a8418d6b
-
SSDEEP
6144:AcJ1AO/sXCiUrEeRV9ukInvTyd/tz1OuG0/:Rj/sXurET+d/tBV/
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1536 4240 WerFault.exe 68 3268 4240 WerFault.exe 68
Processes
-
C:\Users\Admin\AppData\Local\Temp\0388678c64e8dcddadb32588082231b3.exe"C:\Users\Admin\AppData\Local\Temp\0388678c64e8dcddadb32588082231b3.exe"1⤵PID:4240
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 5522⤵
- Program crash
PID:1536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4240 -s 5762⤵
- Program crash
PID:3268
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 4240 -ip 42401⤵PID:3860
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 4240 -ip 42401⤵PID:956