Analysis
-
max time kernel
144s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 01:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23739e15047880bbe0ae53a0b5140a4d.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
23739e15047880bbe0ae53a0b5140a4d.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
23739e15047880bbe0ae53a0b5140a4d.exe
-
Size
173KB
-
MD5
23739e15047880bbe0ae53a0b5140a4d
-
SHA1
a644ab14231ddac5db77162584be4c7ae650ed8b
-
SHA256
338b0e52e09bb74e053c23023c859259027e6cc94d6a28ffad33baad02dfdb65
-
SHA512
54a47ea418ddaaddef88bf22b6087e7e641f12653e7b5a6539591824ce7dfad517ba6bd6750700abf4df622a163e45fb85ed18d4eaa58244b18377bf5e9b5ab4
-
SSDEEP
3072:J0IF4a9RCyjdFdSfX+udeX12Zx/ZP/NjOJVaxw5HgtjCAVkFPopX2crTjlT:hKa9ZdufX+udbZx/FITgtjCckFPiGcrT
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 212 2556 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\23739e15047880bbe0ae53a0b5140a4d.exe"C:\Users\Admin\AppData\Local\Temp\23739e15047880bbe0ae53a0b5140a4d.exe"1⤵PID:2556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2556 -s 4482⤵
- Program crash
PID:212
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2556 -ip 25561⤵PID:4852