Analysis
-
max time kernel
143s -
max time network
109s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 09:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
14b8034482cb398729f506a1197bf59e.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
14b8034482cb398729f506a1197bf59e.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
14b8034482cb398729f506a1197bf59e.exe
-
Size
137KB
-
MD5
14b8034482cb398729f506a1197bf59e
-
SHA1
3f843f72b66c20dccacdb78304e75ea2134b6987
-
SHA256
24c9464e7a1ededb59f7e3bec0b6f207d5fca1c58aadfe46142a93de71900134
-
SHA512
8514406df90fb79cdd9efebd46918fa126f543c776b4a795a89bcf6217dbac3fc50d7cf37e133780f6ce9fd5e9c89596f24e50b71bdc99b26bd4030c5bc210fb
-
SSDEEP
1536:9cODxalDo0/AcaZhHWwRFcoRAsq+99SEuDbmg+7MfOjdKrz3eKyLz3q7VoagHq:vIigyQwRiouib2bmX/jIrzOLa7Voa
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1680 2532 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\14b8034482cb398729f506a1197bf59e.exe"C:\Users\Admin\AppData\Local\Temp\14b8034482cb398729f506a1197bf59e.exe"1⤵PID:2532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2532 -s 2362⤵
- Program crash
PID:1680
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 2532 -ip 25321⤵PID:2140