Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 13:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3855befe3f2d76bb89bb114d3487f315.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
3855befe3f2d76bb89bb114d3487f315.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
3855befe3f2d76bb89bb114d3487f315.exe
-
Size
392KB
-
MD5
3855befe3f2d76bb89bb114d3487f315
-
SHA1
ae7b715a01a44eefa687af21c19c242ad7664c8b
-
SHA256
5dbcbc83e1bbf693ab1cf7e15833c90b3e3bf147e200151f57f54e47e093c36a
-
SHA512
b1f4dc1298c7911248e7662ec1b11a3d4be07b6e35bce3d67506af45d460b9cc9cc8cedaf97bf702cfa3e4d49377690a124f175a410da78a4cfb5e5ddc8985e7
-
SSDEEP
6144:k5F2mGp9VUwTZtX02giP9YoRRQGb8gJCPankzjzVjyTVyS9m1D4GTkkBuw:/jmwTZSihRQwJCi4zVWThBwkjw
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1196 2928 WerFault.exe 17
Processes
-
C:\Users\Admin\AppData\Local\Temp\3855befe3f2d76bb89bb114d3487f315.exe"C:\Users\Admin\AppData\Local\Temp\3855befe3f2d76bb89bb114d3487f315.exe"1⤵PID:2928
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2928 -s 3842⤵
- Program crash
PID:1196
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 2928 -ip 29281⤵PID:4388