Analysis
-
max time kernel
142s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 14:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a2ee8fd153b4a69af4dc513599d58f3.exe
Resource
win7-20231215-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a2ee8fd153b4a69af4dc513599d58f3.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
3a2ee8fd153b4a69af4dc513599d58f3.exe
-
Size
370KB
-
MD5
3a2ee8fd153b4a69af4dc513599d58f3
-
SHA1
7813714a45344a432503ed0a8988979b7253a602
-
SHA256
a9ff124bc323eea500623292735048d4c4c37abe35c69c9463269ef4e63ede8b
-
SHA512
c4e39b3a7bc3b6c1e6566839091c1026f725a8f4f1ee858c8c08d28d914df6823237976677591635d813d441d29d19b6d8aced8dbdc05d854aa05b9abf88040b
-
SSDEEP
6144:tcgIB1CZurQctGFnstjorPwCM5r5LrgtY6ND0OQjAlUBgKgFhyfwvpSd5kZIUMPf:t3aoZStGFnsWAr5gtPN4raUfgFjsyiUQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 5536 5388 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\3a2ee8fd153b4a69af4dc513599d58f3.exe"C:\Users\Admin\AppData\Local\Temp\3a2ee8fd153b4a69af4dc513599d58f3.exe"1⤵PID:5388
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 5388 -s 4602⤵
- Program crash
PID:5536
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 5388 -ip 53881⤵PID:5316