Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 12:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
368ae6ff4432b0acac3f44f9f4d8c5e5.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
368ae6ff4432b0acac3f44f9f4d8c5e5.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
368ae6ff4432b0acac3f44f9f4d8c5e5.exe
-
Size
1.0MB
-
MD5
368ae6ff4432b0acac3f44f9f4d8c5e5
-
SHA1
549fdbf8de05835c6fec9671936ef638f0f29d4c
-
SHA256
cb7c12774dbd9eb02b3f9b71be61657c6586170506a431f62e6bbef6aa39148c
-
SHA512
e412ed86281ef2f44d91943e7503cf142604778f1454ef6f765218c9af994085afb29b8cf64085c8429e0cfb2ddc4b1ce2f6ad75c946286ee0d93975f61e6ce0
-
SSDEEP
24576:PPT0FINIkeiY8NAHDPDDdNu4NLpKL7k+RZK:Pb0FINIXiRmDDS4NLp2Y+RI
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 216 2288 WerFault.exe 56
Processes
-
C:\Users\Admin\AppData\Local\Temp\368ae6ff4432b0acac3f44f9f4d8c5e5.exe"C:\Users\Admin\AppData\Local\Temp\368ae6ff4432b0acac3f44f9f4d8c5e5.exe"1⤵PID:2288
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2288 -s 2642⤵
- Program crash
PID:216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2288 -ip 22881⤵PID:1404