Analysis
- max time kernel
148s - max time network
162s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
31/12/2023, 02:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23de3172bbdfd7ee0b5335644edea040.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
23de3172bbdfd7ee0b5335644edea040.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 23de3172bbdfd7ee0b5335644edea040.exe
- Size 328KB
- Sample231231-cjebpsbhbr
- SHA256 b72ebdf2212ba1f64a84025ffe0446ce9ae5c4f661ac4b570f46f0118bd73ef0
- MD5 23de3172bbdfd7ee0b5335644edea040
- SHA1 ebce1fa17c94655623eef4e21f3f61155feb893a
- SHA512 b4dd12c240e98bc0db139c697f7dc0d30ed19bbdb41a37c4744f4016e6ab5e31fd736cc28aa934e5f0c5fc823a829719100119364234ceeda8d573a55cbb74f9
- SSDEEP 6144:yAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4a:b9Y5ioSsC5+BIK4Tg9EEigR
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 8 1796 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\23de3172bbdfd7ee0b5335644edea040.exe"C:\Users\Admin\AppData\Local\Temp\23de3172bbdfd7ee0b5335644edea040.exe"1⤵PID:1796
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1796 -s 6682⤵
- Program crash
PID:8
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1796 -ip 17961⤵PID:2004