Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 03:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe
Resource
win7-20231129-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe
-
Size
4.1MB
-
MD5
25ed00bc4a03bbbab0ae0ccb79a1b9a9
-
SHA1
22314ffe0affc7d952e93c758624c299afa5f0a6
-
SHA256
5b7dd393e5bd12b7998b78b777324dd882fa8621889f9c4bdc9537574e5e4b22
-
SHA512
80dfe42479b41f7d08fc6f2f970315b868b2e249f3d03b98fe897bb33d497e3422b7e95c7ec6bda98a2098de05c31793d3fdfc43a332d3e60bae06d972e624db
-
SSDEEP
98304:Hz7Xb6rg/JwCcJnsgt1vdo08s2JpQpwh4Vlmfxl7+:/Xb6rgxcp99dIJpQp7Lm6
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4204 4104 WerFault.exe 87 4396 4104 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe"C:\Users\Admin\AppData\Local\Temp\25ed00bc4a03bbbab0ae0ccb79a1b9a9.exe"1⤵PID:4104
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 5962⤵
- Program crash
PID:4204
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4104 -s 5962⤵
- Program crash
PID:4396
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 356 -p 4104 -ip 41041⤵PID:1556
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 4104 -ip 41041⤵PID:3144