Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 00:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21808e44f756c83a5d5fd188e4dfc11f.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
21808e44f756c83a5d5fd188e4dfc11f.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
21808e44f756c83a5d5fd188e4dfc11f.exe
-
Size
64KB
-
MD5
21808e44f756c83a5d5fd188e4dfc11f
-
SHA1
11b1f5a32c5de9108521787306001070d6ee7f41
-
SHA256
109929d83ab94bdbff3189ac3afb338cc73ebfe4e9834cbda764c43f152f024e
-
SHA512
e52259e57a89d0465bc68af8e02d616cf0055125e874ced410b99d285699828ceb99a87f10f018c937a5f1d3515bdef67c9ba0ee90d467ea40bbb51084b8da92
-
SSDEEP
1536:j/TdK2nMz+guYr+y2PVPb88bDGKG9ofkmEr9EC+xD8VHW2LYsBMu/H1:j/TbiuYCNPVPY8bu0kB5+xD8YaN
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2872 220 WerFault.exe 12
Processes
-
C:\Users\Admin\AppData\Local\Temp\21808e44f756c83a5d5fd188e4dfc11f.exe"C:\Users\Admin\AppData\Local\Temp\21808e44f756c83a5d5fd188e4dfc11f.exe"1⤵PID:220
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 220 -s 4002⤵
- Program crash
PID:2872
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 220 -ip 2201⤵PID:3976