Analysis
-
max time kernel
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 13:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
19de1bb0ec43cfd1f57054a0c83a7b7f.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
19de1bb0ec43cfd1f57054a0c83a7b7f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
19de1bb0ec43cfd1f57054a0c83a7b7f.exe
-
Size
52KB
-
MD5
19de1bb0ec43cfd1f57054a0c83a7b7f
-
SHA1
13a2a0390639d3bf676f1b61fc2db92441c01e08
-
SHA256
d4f5d6d6bef73a44b794d4e3d5ccd6d58ad95208fb77c091ffb59402a27fe9ec
-
SHA512
f20ed660131ec1947a29dcb515623c6183aeff17c8c19ca22666cd1b8427b0b6ed160b4df1ab7b881faed5f030b7a05939cc689f7121d6d3e8d847f7400bcfc7
-
SSDEEP
768:s+tdWOUJklnM6wqnr5VXTm5f/m09SuLujxVry2w4RM/nI0x8Q7+rG14eyHa:xdm6M6bnrPTPMujxV/q/nQ/r+5
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 948 1768 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\19de1bb0ec43cfd1f57054a0c83a7b7f.exe"C:\Users\Admin\AppData\Local\Temp\19de1bb0ec43cfd1f57054a0c83a7b7f.exe"1⤵PID:1768
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1768 -s 2682⤵
- Program crash
PID:948
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1768 -ip 17681⤵PID:2320