Analysis
-
max time kernel
141s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 05:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
296b96c8bdea56167dbeebd440346c75.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
296b96c8bdea56167dbeebd440346c75.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
296b96c8bdea56167dbeebd440346c75.exe
-
Size
99KB
-
MD5
296b96c8bdea56167dbeebd440346c75
-
SHA1
373790128bad9c023ebb70e3c72e624c4ef19e54
-
SHA256
7e76293f8f1d8981be3bd3c956a668069ba5f0e85489cc359ec81def19e5ac7f
-
SHA512
403c92a455196ac436254f630673b2e440043c3385a4968fa3b95fe856bae2ade1127a0735011b958015c70c1794164f1ad52f136792277b13320332dc81057c
-
SSDEEP
1536:XMpTO3NdRdFYyGeYOoopwE92rbbOCXO2CxJ3w2TWa2S4gsRnlxU7DGXIg:XMpEDglA23bO0O2CxJ3w2/1oD2Gt
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2544 4500 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\296b96c8bdea56167dbeebd440346c75.exe"C:\Users\Admin\AppData\Local\Temp\296b96c8bdea56167dbeebd440346c75.exe"1⤵PID:4500
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4500 -s 8362⤵
- Program crash
PID:2544
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4500 -ip 45001⤵PID:1976