Analysis
-
max time kernel
164s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 02:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
24244ddf4fcc4c83996bc8dd83e3e822.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
24244ddf4fcc4c83996bc8dd83e3e822.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
24244ddf4fcc4c83996bc8dd83e3e822.exe
-
Size
84KB
-
MD5
24244ddf4fcc4c83996bc8dd83e3e822
-
SHA1
2d02baac3689af41a425c0e0a41caa6a0244de4e
-
SHA256
d050f370028c910e2e1321142ca5141a6452c10fad86b4e9717ea9d2c259cc4b
-
SHA512
7a39bf7bfca98cb6b3a25ff9449091884c56c96a1e2c03bf073672c41f7b67639aba43a22ab8cffbe54f231928e9620687a20db25597a541c21be18d7b3d118d
-
SSDEEP
1536:1lgQwkCR4IDNuBhNOV6baOUn0f7pzmVIU:nIDBWNL1Sudz/U
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2164 2652 WerFault.exe 48
Processes
-
C:\Users\Admin\AppData\Local\Temp\24244ddf4fcc4c83996bc8dd83e3e822.exe"C:\Users\Admin\AppData\Local\Temp\24244ddf4fcc4c83996bc8dd83e3e822.exe"1⤵PID:2652
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2652 -s 2922⤵
- Program crash
PID:2164
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2652 -ip 26521⤵PID:1624