Analysis
-
max time kernel
142s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 20:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1bfe13c078739ab5d9a3a0ad529be77d.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1bfe13c078739ab5d9a3a0ad529be77d.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
1bfe13c078739ab5d9a3a0ad529be77d.exe
-
Size
19KB
-
MD5
1bfe13c078739ab5d9a3a0ad529be77d
-
SHA1
8efd66d38c2ef8def2afa919e82115079a9cbf3e
-
SHA256
b935aadc4d9c236387f1e9a9fe9063275f5b0507e7ca9d5e62bc929286dc1536
-
SHA512
1a0d594f7756870a99ace25cf833fce29d2c92278ed2d1e9fab7b5a2cbffc98c08e08340b6b35f18045c86ca3492d8b045a21c690b89759bfeed097457e91be5
-
SSDEEP
384:yzqymiS69uHqYFr1Uvq+jtJnqyvrrkUeHAC1TXMUT3PC2AAkQK:xd3Km1HerkUeHdXLCdbN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4564 4924 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\1bfe13c078739ab5d9a3a0ad529be77d.exe"C:\Users\Admin\AppData\Local\Temp\1bfe13c078739ab5d9a3a0ad529be77d.exe"1⤵PID:4924
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4924 -s 2002⤵
- Program crash
PID:4564
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 4924 -ip 49241⤵PID:2116