Analysis
-
max time kernel
145s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 10:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
165b941fad488433e714553e27ebbca7.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
165b941fad488433e714553e27ebbca7.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
165b941fad488433e714553e27ebbca7.exe
-
Size
2.3MB
-
MD5
165b941fad488433e714553e27ebbca7
-
SHA1
d443419952e77cc91a6975cb9b424fbce60ad273
-
SHA256
d9b3022177c195d8ef3ff24ad179fff578e1c8bb859b614445694a7f055201dc
-
SHA512
efefb9a432cb04c47d260c148ee9e7de7de34685bfbf363e817410a4d8fc7aa5764672385612a376f74e06f523c74ff231d3d815a33ac642142128ab8b7dee50
-
SSDEEP
24576:ASYgTcIaSCWh1XhQcxXosdW+15K08hl5HEZDrHDuf6qPFHzsM/NpeOzGkpgbQT5L:AP0vfTi05cfHQDVaztRT5hvby87QS4K
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1556 2336 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\165b941fad488433e714553e27ebbca7.exe"C:\Users\Admin\AppData\Local\Temp\165b941fad488433e714553e27ebbca7.exe"1⤵PID:2336
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2336 -s 6442⤵
- Program crash
PID:1556
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 2336 -ip 23361⤵PID:996