Analysis
- max time kernel
148s - max time network
117s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
30/12/2023, 12:57
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1936c2e9c8a18965c651b716524723c0.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1936c2e9c8a18965c651b716524723c0.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
- Target 1936c2e9c8a18965c651b716524723c0.exe
- Size 32KB
- Sample231230-p65hmacgep
- SHA256 5e70b1e6d59b14f68f1665f2277158d9881717863708629dcc289c31d9b5d80a
- MD5 1936c2e9c8a18965c651b716524723c0
- SHA1 1b142ff4e326bdf55e712f0b9559241e3c44b96b
- SHA512 1b9891b614c992ddd54ac5d069f47011eb4fe3900e443ebd2293a9218dbee9cac8134688f84fef5359193fc2a40608f09d776ea09d0acc5561bfbf3d14ae134b
- SSDEEP 384:O/W90FmEUh6V3DeP0Tl6vJmIfsaa+8Ba9TexQhmH50+k:9xmzesTAxmda5CaUZ0+k
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 2 IoCs
pid pid_target Process procid_target 8 2716 WerFault.exe 14 776 2716 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1936c2e9c8a18965c651b716524723c0.exe"C:\Users\Admin\AppData\Local\Temp\1936c2e9c8a18965c651b716524723c0.exe"1⤵PID:2716
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2716 -s 2722⤵
- Program crash
PID:8
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2716 -s 2762⤵
- Program crash
PID:776
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 2716 -ip 27161⤵PID:1700
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 2716 -ip 27161⤵PID:2252