Analysis
-
max time kernel
147s -
max time network
7s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 04:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
27ed03ffd711e2012a1c1df6cb9a3924.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
27ed03ffd711e2012a1c1df6cb9a3924.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
27ed03ffd711e2012a1c1df6cb9a3924.exe
-
Size
33KB
-
MD5
27ed03ffd711e2012a1c1df6cb9a3924
-
SHA1
eba457b8409a98f61f33aeea2e9af6346d460616
-
SHA256
d7ef1cbf0447fb74a584d6fa2956d9c105eabe9882c3890b44a760d1de4ee92b
-
SHA512
47bdb16ca5571433c7acafa283a1bbea6911b9c0b44bc106d6473fce5e5a16290f6f87ea6459c0bfd7507cac92d2ed658d8383d9cf9aee8b5d9f37ad49acaf99
-
SSDEEP
768:MSICcHhdz5CpPtvhBWC9y6cl37F8gjRGxZ6vWZ6X:MSFol5W19VsrF8gVG2+Zk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2108 1492 WerFault.exe 12
Processes
-
C:\Users\Admin\AppData\Local\Temp\27ed03ffd711e2012a1c1df6cb9a3924.exe"C:\Users\Admin\AppData\Local\Temp\27ed03ffd711e2012a1c1df6cb9a3924.exe"1⤵PID:1492
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1492 -s 2642⤵
- Program crash
PID:2108
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1492 -ip 14921⤵PID:3428