Analysis
-
max time kernel
145s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 00:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09110d240f040d054f576516ea152744.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
09110d240f040d054f576516ea152744.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
09110d240f040d054f576516ea152744.exe
-
Size
619KB
-
MD5
09110d240f040d054f576516ea152744
-
SHA1
a51a210399f41a993fc1c772a8f2503b851eda5b
-
SHA256
4c7bb09d5b43095bba4223293bfbbc7877775c26a739dcc2f957fa65c7a3b621
-
SHA512
8c76154db6d975a483387915b0c97efa95df252b2b69ccd1046316055ffb26f8db609071d32dff2e1d81dce11b1c097f16a80a42538da1f7079a87f6c4635107
-
SSDEEP
12288:shgfCKppmi2IF3Z4mxxcXn0PR0pSGv4A8c0:sXilQmXc30P6EGvrR0
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 1880 3204 WerFault.exe 32 2284 3204 WerFault.exe 32
Processes
-
C:\Users\Admin\AppData\Local\Temp\09110d240f040d054f576516ea152744.exe"C:\Users\Admin\AppData\Local\Temp\09110d240f040d054f576516ea152744.exe"1⤵PID:3204
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 3242⤵
- Program crash
PID:1880
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3204 -s 6282⤵
- Program crash
PID:2284
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3204 -ip 32041⤵PID:4660
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 3204 -ip 32041⤵PID:224