Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 11:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
16dab65ff69b489b0c5c4eb1242dd51c.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
16dab65ff69b489b0c5c4eb1242dd51c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
16dab65ff69b489b0c5c4eb1242dd51c.exe
-
Size
1.8MB
-
MD5
16dab65ff69b489b0c5c4eb1242dd51c
-
SHA1
124c9ffca4f669b30e89b7189853db9937bdc865
-
SHA256
69598c5e84c4ea7ad49ffd9891ba1853c714a9ffa3ee5246c7274d1b3bc9f3e5
-
SHA512
4c7722f9b4189f9122981f5b87b4c01f4c4066aa8f9152164c8a32f0b114e5e9f73a660998b04314d8064cffca330cd0aa026cc6aea1cb1a12fb232ae185280e
-
SSDEEP
24576:QJUHr9AH6TVhalNtPbLkPwfsyy/12M0oOEuvHDkEQFzYSP2XJ4sAGM:JmHSVhAFbU/tOOEkSW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1984 5008 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\16dab65ff69b489b0c5c4eb1242dd51c.exe"C:\Users\Admin\AppData\Local\Temp\16dab65ff69b489b0c5c4eb1242dd51c.exe"1⤵PID:5008
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5008 -s 10322⤵
- Program crash
PID:1984
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 368 -p 5008 -ip 50081⤵PID:3128