Analysis
- max time kernel
143s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
30/12/2023, 04:18
Static task
static1
Behavioral task
behavioral1
Sample
0e34d4198c8b933017a31033ca56f499.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e34d4198c8b933017a31033ca56f499.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 0e34d4198c8b933017a31033ca56f499.exe
- Size 33KB
- Sample231230-exaa1sbddr
- SHA256 9d7b53634f0fd0681d4793078638f35658f043aa8405fc61da39696312e99d81
- MD5 0e34d4198c8b933017a31033ca56f499
- SHA1 b58b4f549778df2aae29c2155bca0262ad4c7269
- SHA512 75c912a1b86e094064eee5482ea27c1de014e562bc5c936962e5f771074e7017ddfc8a53534debd37fbefb9f8ff7d0c557933ffa84b29f668d9b8b5f5b629daa
- SSDEEP 768:8VsoiMXuYJmZTgM8wVoB7k8DEit4TzWy4jsoAsJ7Km:8yKeplnGJkjOe3wAsJ2m
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 2692 3688 WerFault.exe 12
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e34d4198c8b933017a31033ca56f499.exe"C:\Users\Admin\AppData\Local\Temp\0e34d4198c8b933017a31033ca56f499.exe"1⤵PID:3688
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3688 -s 3442⤵
- Program crash
PID:2692
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3688 -ip 36881⤵PID:3228