Analysis
-
max time kernel
149s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31-12-2023 04:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
282c3abcf5533377d684d2fc30593de2.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
282c3abcf5533377d684d2fc30593de2.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
282c3abcf5533377d684d2fc30593de2.exe
-
Size
47KB
-
MD5
282c3abcf5533377d684d2fc30593de2
-
SHA1
54eeb60bf47f6b4c425f0484e676c86e6f8ea0b6
-
SHA256
48551f06148a3e049fa73acf13ff21c5beb19c29880b16b15a38a6e6cca0adb3
-
SHA512
e39b7a87a60e01403461771b8b46423b230726b0a57405707feeb206ddad6f9b473104831ed92fb37029fa355bb372e2d38c14e6dabfe3f51e9f843bf191e82c
-
SSDEEP
768:J9cU4gjwIYy0LXzGkhe9sArPPG/S9g5jNjnYxDE9teQ8iN/ZhV4IG/aH8+sc6y7b:JKgt0Ddhe9bWt5jNMd0tec/ZhaIGyn6D
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4132 3036 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\282c3abcf5533377d684d2fc30593de2.exe"C:\Users\Admin\AppData\Local\Temp\282c3abcf5533377d684d2fc30593de2.exe"1⤵PID:3036
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3036 -s 5722⤵
- Program crash
PID:4132
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 3036 -ip 30361⤵PID:3248