Analysis
-
max time kernel
149s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 02:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2542bfc73566e261b0561d49a2557d8b.exe
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2542bfc73566e261b0561d49a2557d8b.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2542bfc73566e261b0561d49a2557d8b.exe
-
Size
435KB
-
MD5
2542bfc73566e261b0561d49a2557d8b
-
SHA1
5d51667ea65496d780e10bb59b80ae110d29c2c7
-
SHA256
647b87eda3d86b73ae8c5e74e4a33ac768ed08e73de9b7582dbbebbd2ce70913
-
SHA512
d6ac46018ca5b04107a9f85aded036000d42511ed7edaee79692f280a02f5af367861f987c5bd9821788269af0c5aef70b09fb7896e13e87da76704ac97a8d6a
-
SSDEEP
12288:Uz7ql55AXsFhLI+us3fPgfLAd6gxuGaadVhRd7XilfCCHK9tKS:555X/I+uswjAcgZJ/ufxH+
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4348 4760 WerFault.exe 86 3356 4760 WerFault.exe 86
Processes
-
C:\Users\Admin\AppData\Local\Temp\2542bfc73566e261b0561d49a2557d8b.exe"C:\Users\Admin\AppData\Local\Temp\2542bfc73566e261b0561d49a2557d8b.exe"1⤵PID:4760
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 5322⤵
- Program crash
PID:4348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4760 -s 5242⤵
- Program crash
PID:3356
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 4760 -ip 47601⤵PID:4284
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4760 -ip 47601⤵PID:1528