Analysis
-
max time kernel
145s -
max time network
65s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 01:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09df8e6ee88e245f8680b5c3d5ce669a.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
09df8e6ee88e245f8680b5c3d5ce669a.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
09df8e6ee88e245f8680b5c3d5ce669a.exe
-
Size
56KB
-
MD5
09df8e6ee88e245f8680b5c3d5ce669a
-
SHA1
b67efbd1824154be8efeeefd08b01d9955a52c6a
-
SHA256
fabd1f9f14da64f1879a78f97088ae1279ef7da962b991d39c635006c0d7a4ed
-
SHA512
10f07de5e664114016d8471de6d1558bd3846b2e676a060864f23d5e5129c26779730c7d051ec290653f62fae27f0efb5e0d4e55807f7af767db23c528c354ee
-
SSDEEP
768:/Pv+5OvlMAOuuv8X6bYbtwtHOjZo/RRPDpX/2V/aj/8vNaRdJL+YjRiNPh1/1H5g:/u5OyArO8KbMkpvhjkvNwdJL5Qrs
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5072 1220 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\09df8e6ee88e245f8680b5c3d5ce669a.exe"C:\Users\Admin\AppData\Local\Temp\09df8e6ee88e245f8680b5c3d5ce669a.exe"1⤵PID:1220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1220 -s 3602⤵
- Program crash
PID:5072
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 1220 -ip 12201⤵PID:4460