Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
29-12-2023 20:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
03965c7eb0d856fc07639a11068e7037.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
03965c7eb0d856fc07639a11068e7037.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
03965c7eb0d856fc07639a11068e7037.exe
-
Size
96KB
-
MD5
03965c7eb0d856fc07639a11068e7037
-
SHA1
336dfa5949e85b8c4ffa928a6666906cf93c229c
-
SHA256
3fe1004b169376b123d958ef9bf48c6c21f16f46abc7f418638c6ba74636bdca
-
SHA512
a9ff15aec10d8c7d37dee198cf2b6ad8ba5e1376e45fac0bff87ad73e8ca0262cac9efaf82d1409d64941391106290ae1d88df20ff2f2348f1883f72bbf1a8f5
-
SSDEEP
768:z06R0UKzOgnKqGR7//GPc0LOBhvBrHks3IiyhDYQbGmxlNaM+WGa1wuxnzgOYw9f:xR0vxn3Pc0LCH9MtbvabUDzJYWu3Bg
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3180 2036 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\03965c7eb0d856fc07639a11068e7037.exe"C:\Users\Admin\AppData\Local\Temp\03965c7eb0d856fc07639a11068e7037.exe"1⤵PID:2036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 4602⤵
- Program crash
PID:3180
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2036 -ip 20361⤵PID:3388