Analysis
-
max time kernel
159s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 00:11
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21304a527f35728e3d71545c7c6227de.exe
Resource
win7-20231215-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
21304a527f35728e3d71545c7c6227de.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
21304a527f35728e3d71545c7c6227de.exe
-
Size
185KB
-
MD5
21304a527f35728e3d71545c7c6227de
-
SHA1
d9bc99476fc3bc432d5a936b34c71ab87f1d06a9
-
SHA256
f00395da1c2838b95084d18a8da2d6dbe89ae74b00508e4dafcd65198ba0843c
-
SHA512
d47c19954d5534e646f3d894c045d8a1e416c313cb57fb6700060601f0d051e0e75ab69e0f0e1e9279a05d08d9e355e5826dfee6201063d685da803aedc49893
-
SSDEEP
3072:gChtBiEUFOU7My+8X1No0ZB3oqPP9y55byHO5A0AAmmPHKh4zlqbT4E2JvwSct:nBiEUnQGNo0OEPsIu+BAmmPqh4zE
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1092 3532 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\21304a527f35728e3d71545c7c6227de.exe"C:\Users\Admin\AppData\Local\Temp\21304a527f35728e3d71545c7c6227de.exe"1⤵PID:3532
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3532 -s 4482⤵
- Program crash
PID:1092
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 3532 -ip 35321⤵PID:3292