Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 11:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
17cb17eb2bbc23b786d194e3199e419e.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
17cb17eb2bbc23b786d194e3199e419e.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
17cb17eb2bbc23b786d194e3199e419e.exe
-
Size
732KB
-
MD5
17cb17eb2bbc23b786d194e3199e419e
-
SHA1
1cb014c53385e60adeb79a06d0a5fe0614bab399
-
SHA256
831032139510a09994b1500ad16013641519dce287f9adb6241b6ee0b8a1f578
-
SHA512
581cc5a52106587dce2647b79cc0f6edde3d492c9c2c2fa6b3e53b7a8ad24a4d3327e42a3899ff7f61a289eb034e0e33d4a5d7541d68f2c1552a60c450ab227d
-
SSDEEP
12288:UShKg8H5btg8d3ZsurFQrfiLXK6duSs2dsED9sXz3B+fR+/9C7E7h8z5dRkT0d+Q:H8Z/3nBQj6b421a+5+wYadLLRz5C2H
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2608 2944 WerFault.exe 12
Processes
-
C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe"C:\Users\Admin\AppData\Local\Temp\17cb17eb2bbc23b786d194e3199e419e.exe"1⤵PID:2944
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 3122⤵
- Program crash
PID:2608
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2944 -ip 29441⤵PID:2680