Analysis
-
max time kernel
145s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30-12-2023 14:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1b3ce4a5419488cb8fc6618d7c80eece.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1b3ce4a5419488cb8fc6618d7c80eece.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
1b3ce4a5419488cb8fc6618d7c80eece.exe
-
Size
321KB
-
MD5
1b3ce4a5419488cb8fc6618d7c80eece
-
SHA1
9e75dd1dd7063bbe6ff2643766eee4a9c43d6d86
-
SHA256
e598097dcc5b1c4b67b99854e70d95a562ea9f8971e869b4c7d01736839360f9
-
SHA512
451f84fe24c9b2809e12cc3849176f6b538105ac0989a193828128e78518c8ec19b4dc30854d2659d0e40dcbff95e1d9e2457f4f38992b53c85da39ad7270f25
-
SSDEEP
6144:OTj1OTEKnsub1upoH7td/tQqG56Prd3Z5NBA3r14lJDNIl:OFOoKnsub6oHprG5+3a7STY
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2760 4832 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\1b3ce4a5419488cb8fc6618d7c80eece.exe"C:\Users\Admin\AppData\Local\Temp\1b3ce4a5419488cb8fc6618d7c80eece.exe"1⤵PID:4832
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4832 -s 3322⤵
- Program crash
PID:2760
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 192 -p 4832 -ip 48321⤵PID:4768