Analysis
-
max time kernel
141s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2024, 11:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3cbe480799648078dafd39bebef3f145.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3cbe480799648078dafd39bebef3f145.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
3cbe480799648078dafd39bebef3f145.exe
-
Size
187KB
-
MD5
3cbe480799648078dafd39bebef3f145
-
SHA1
594c79d845f8e5609314532046873e4d9b84dae3
-
SHA256
07cb9aa2f1f3373ee1068581c2728a466f6032f32857a626fe019c503be288a6
-
SHA512
e1b7e8b12bad9468a3987a79e3321c57ed02e9e46a116a109efb2b7af4389cc2385a309cf5747ee0870869bc53e079b62963e8137acec4eea958f1f225d31ba0
-
SSDEEP
3072:5KqQx8pYZClaGgx/wcj0Les7W3bz9dtAcYmPTlgJ2BNhlcxNq6LgYUxirxm3Tdc:5xQqeZC8HVJj0i7rpA2y2Blcx1LgYUxX
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4328 3400 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\3cbe480799648078dafd39bebef3f145.exe"C:\Users\Admin\AppData\Local\Temp\3cbe480799648078dafd39bebef3f145.exe"1⤵PID:3400
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3400 -s 2562⤵
- Program crash
PID:4328
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3400 -ip 34001⤵PID:3672