Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
30/12/2023, 12:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1915bf70589895e13c0d65fc481c84c7.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1915bf70589895e13c0d65fc481c84c7.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 1915bf70589895e13c0d65fc481c84c7.exe
- Size 87KB
- Sample231230-p3txqacbbq
- SHA256 8d790f3a49971389a9dad8a30b796bb41bbda8615754a490f78ee37aa3c4cbbc
- MD5 1915bf70589895e13c0d65fc481c84c7
- SHA1 06488526f8ef01ffd00bc6f01a1841bb53ba2f93
- SHA512 c84469299f3a551e76d25fea8e66914d4562335c28821c0511c49ee366afdf289b661136c701be32ee15098058489904fbde644dea564e3d23f26744308e6994
- SSDEEP 1536:Fg2VQeil5L2kMwCTHXq07bLYQRL9RJfHAoQsGWINPRZVtU8fl:0ewJbSVUQF9RJfAoQ7WUZVtUyl
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4816 1164 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\1915bf70589895e13c0d65fc481c84c7.exe"C:\Users\Admin\AppData\Local\Temp\1915bf70589895e13c0d65fc481c84c7.exe"1⤵PID:1164
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1164 -s 4002⤵
- Program crash
PID:4816
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1164 -ip 11641⤵PID:3204