Analysis
-
max time kernel
139s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 04:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0e252408364f895cd5e8be63fe1b8dff.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e252408364f895cd5e8be63fe1b8dff.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0e252408364f895cd5e8be63fe1b8dff.exe
-
Size
80KB
-
MD5
0e252408364f895cd5e8be63fe1b8dff
-
SHA1
6c19778c86d8cf51fd63bf51b3f3ae34aebe83ca
-
SHA256
ae9b579e96250d2bcef7ca4aae6e07c1927076be2dba2ce723e67673fc5e1563
-
SHA512
61154904814dd0c3fe61a6ae50e25f3dc33a5b68f167006321964eb46f7e363406ce148bb4be3d4af3f3c57f5b3341a13b9a8e5035883ea1d84983136b6bc36b
-
SSDEEP
1536:YdgfSsp8aNjZiHVOjxtuKgW27zh0a0jjqz3:YdTsFVsVCtuseKG3
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2848 640 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e252408364f895cd5e8be63fe1b8dff.exe"C:\Users\Admin\AppData\Local\Temp\0e252408364f895cd5e8be63fe1b8dff.exe"1⤵PID:640
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 640 -s 2922⤵
- Program crash
PID:2848
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 640 -ip 6401⤵PID:3428