Analysis
-
max time kernel
142s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 01:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0a713be6dd78ce894389141b057f28ee.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0a713be6dd78ce894389141b057f28ee.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0a713be6dd78ce894389141b057f28ee.exe
-
Size
191KB
-
MD5
0a713be6dd78ce894389141b057f28ee
-
SHA1
afff44ecb5c49af392d5ce01156bf3b6b90507ab
-
SHA256
639e6af76a18d97834ef257f61f3b41c6def3d4ed4cdfb2e48dc32e6fe7f9622
-
SHA512
a997a802d663081b30b52d678c758c118d1c08c3f0de82ccecff6a8b2d678bc05fa80267ac3c0cdfa636d8c7f09ed32867e66f7214fcacd0d7591cf0a2b542d7
-
SSDEEP
3072:0s0eKexxG4efvuDDnlYQP+CzTNpWxkUBZyg4zL4K7rP5B7PIcID7:WeK6UBv9Q2CTP4fnyhzL4uX4
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4768 4276 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\0a713be6dd78ce894389141b057f28ee.exe"C:\Users\Admin\AppData\Local\Temp\0a713be6dd78ce894389141b057f28ee.exe"1⤵PID:4276
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4276 -s 3122⤵
- Program crash
PID:4768
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4276 -ip 42761⤵PID:4928