Analysis
-
max time kernel
157s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 22:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1eed05c78e2721b06a1158a3d7d54077.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1eed05c78e2721b06a1158a3d7d54077.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1eed05c78e2721b06a1158a3d7d54077.exe
-
Size
228KB
-
MD5
1eed05c78e2721b06a1158a3d7d54077
-
SHA1
c3d87e3a229eb0d02f2de0b768fb4850ecbb24af
-
SHA256
e2f487f54b21bbe6401a4f3378c8cf9e565f4ee13e598d59127f27a14f2c6ffc
-
SHA512
04b35754c98931dd4876278101d11b9cd8fc54c1f6639a337f8eb5f143fd33ab84fdad7b89feec92e50142ae311e2958dbb541cd9c88fdc290133fd56b00c3b5
-
SSDEEP
3072:L1ZfUu1nCKHONRdps0yupQ8+QUjkW89zaelC1CtklJ9rvYAdxUpjwdAbcOY1jt+z:ZZfUknC3RdpsBENklJ9rvVXUYAbcpw
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 864 3732 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\1eed05c78e2721b06a1158a3d7d54077.exe"C:\Users\Admin\AppData\Local\Temp\1eed05c78e2721b06a1158a3d7d54077.exe"1⤵PID:3732
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3732 -s 4882⤵
- Program crash
PID:864
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3732 -ip 37321⤵PID:1740