Analysis
-
max time kernel
143s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 13:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
195f8e8c68c6d9b2c58ad85ebf5f9c82.exe
Resource
win7-20231129-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
195f8e8c68c6d9b2c58ad85ebf5f9c82.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
195f8e8c68c6d9b2c58ad85ebf5f9c82.exe
-
Size
106KB
-
MD5
195f8e8c68c6d9b2c58ad85ebf5f9c82
-
SHA1
70581d16fe96f5f62f0f8f7bc7a32ef26f448de3
-
SHA256
38345008c226502db755b5e0200336638ad1524431936d04ca1497be3f26aa7c
-
SHA512
6a7b359dbc63ae3cd087dfaa845c756b1102b62c284b20493eb4fd67d6ee0ee9e1daa90ab5817c1b4d22d63d354995b2ac7489745307f9eace9342c22eafbf42
-
SSDEEP
1536:SX1cLdclP5iDghkai27v5pHGMN52V3RfTmtK49Bw/qcVcdTX3kuJb:SX8dUhlhrjGMNUVhqK4Pfci9X3kuJb
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1468 2148 WerFault.exe 73
Processes
-
C:\Users\Admin\AppData\Local\Temp\195f8e8c68c6d9b2c58ad85ebf5f9c82.exe"C:\Users\Admin\AppData\Local\Temp\195f8e8c68c6d9b2c58ad85ebf5f9c82.exe"1⤵PID:2148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2148 -s 1842⤵
- Program crash
PID:1468
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 2148 -ip 21481⤵PID:3952