Analysis
-
max time kernel
154s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 00:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21ffd565d0b8ace569a8e202d8cea228.exe
Resource
win7-20231129-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
21ffd565d0b8ace569a8e202d8cea228.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
21ffd565d0b8ace569a8e202d8cea228.exe
-
Size
373KB
-
MD5
21ffd565d0b8ace569a8e202d8cea228
-
SHA1
479c6f98c5d813ceca23e16cf468c547a039fb7e
-
SHA256
f71f0b4ae3c220ae543931d39165f79da9d9a4de0b74c2890d05a7b8c62e258a
-
SHA512
832efdf964eab08dbf863803e37d40e8c2b6e095bb31b29a65d52aa6d530f8d040b2b02a4eac64392d8a1d745f4be57fec181fd3f1e4113731b038aabe8d2c4f
-
SSDEEP
6144:9vvu41TrJNFWyDVa6c83u8p3soPJkHUvhgSNDc1SQ3Tx:93TR5p3LpDPSchvDc1djx
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 2384 1312 WerFault.exe 87 2360 1312 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\21ffd565d0b8ace569a8e202d8cea228.exe"C:\Users\Admin\AppData\Local\Temp\21ffd565d0b8ace569a8e202d8cea228.exe"1⤵PID:1312
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 5682⤵
- Program crash
PID:2384
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1312 -s 6122⤵
- Program crash
PID:2360
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 1312 -ip 13121⤵PID:3120
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 520 -p 1312 -ip 13121⤵PID:4000