Analysis
-
max time kernel
171s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 02:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0b9abe6184b5ecb0a49176de3325acca.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b9abe6184b5ecb0a49176de3325acca.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
0b9abe6184b5ecb0a49176de3325acca.exe
-
Size
26KB
-
MD5
0b9abe6184b5ecb0a49176de3325acca
-
SHA1
c51e434d3c5eeca03663e457d2b0b27e40a04b42
-
SHA256
752d9136f8c7c891216ecf3da89d2c2720552e23489ead7184d55f002aa427b1
-
SHA512
dcdf36f0d18e9f5477d268580a48cd04d5a52aa64ae56ef807550658c754fd793d245c4fe7aefb835598ae67504092540fb753080b18ee5478305532b03b6cbb
-
SSDEEP
384:S3f9Dx81uFLW7q9yQVH7kzIvB/AS7IszmCyCSTMyx6+O+dwvDa:S121uhzycbWmj7IimC5x+OM
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2820 4944 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\0b9abe6184b5ecb0a49176de3325acca.exe"C:\Users\Admin\AppData\Local\Temp\0b9abe6184b5ecb0a49176de3325acca.exe"1⤵PID:4944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4944 -s 2762⤵
- Program crash
PID:2820
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 372 -p 4944 -ip 49441⤵PID:2920