Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 23:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1f60678ba5eaaac20f4ae94b65946914.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f60678ba5eaaac20f4ae94b65946914.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1f60678ba5eaaac20f4ae94b65946914.exe
-
Size
80KB
-
MD5
1f60678ba5eaaac20f4ae94b65946914
-
SHA1
8e8731d2b00fd307a7dbf78b6a3cf9748041ea38
-
SHA256
f6caedc7f20a17d0549c76c68ccc125f4f2b7d28a4e808df00005953ee2ad95f
-
SHA512
29031b075a236b8c553a112752266a2bfa099cffd9010da97549a735bc58f06a93c4cbb5fe91c69eb8bf0dee36f7cabf518462458cb77a73e48a47ce3b95e752
-
SSDEEP
1536:fKTj6UHoxl/epSmUpvLiiW5lBFSmgpeWUyIX:Ej6U/UpuiQBFSm1X
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2408 1956 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1f60678ba5eaaac20f4ae94b65946914.exe"C:\Users\Admin\AppData\Local\Temp\1f60678ba5eaaac20f4ae94b65946914.exe"1⤵PID:1956
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 2242⤵
- Program crash
PID:2408
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1956 -ip 19561⤵PID:920