Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 11:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1785c826075549a54cbf56ebe2b1592c.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1785c826075549a54cbf56ebe2b1592c.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1785c826075549a54cbf56ebe2b1592c.exe
-
Size
116KB
-
MD5
1785c826075549a54cbf56ebe2b1592c
-
SHA1
3921d8f49b18d84cfa2eb39feed967030650b3fe
-
SHA256
3afbb18eeb20290a03000432ddb91f22af7ca1467048a4790123e5b51045eaee
-
SHA512
ca192fca9067ec4f314b997e961615d3f5f37a0a8eb7f8f901112f20145d4efea9387ce95f2972a372e7b16df137bc177cb02bcf20f3be5c1078e7a72964bfc1
-
SSDEEP
3072:+/eXWdQomaGOgKT9kWz1IwyDCxqOAlJ2b:ke8EyaWzDyyCJ2b
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4668 4252 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1785c826075549a54cbf56ebe2b1592c.exe"C:\Users\Admin\AppData\Local\Temp\1785c826075549a54cbf56ebe2b1592c.exe"1⤵PID:4252
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4252 -s 2242⤵
- Program crash
PID:4668
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4252 -ip 42521⤵PID:1012