Analysis
-
max time kernel
144s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
03/01/2024, 14:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b1432ef93e6466c27d4ac59028ee254.exe
Resource
win7-20231215-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b1432ef93e6466c27d4ac59028ee254.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
2b1432ef93e6466c27d4ac59028ee254.exe
-
Size
165KB
-
MD5
2b1432ef93e6466c27d4ac59028ee254
-
SHA1
e7a68440a69e99033e6ba2ca9fa19ab931584c28
-
SHA256
a5574d4791492293674dddbb259309a2cdb24471103484a0882f3c076a7cc1ef
-
SHA512
c694cf1b9cc2ad6bcbbad4cacc7bd2d94cf49231bde87ff47688c5bcc758f31fd458df01cb3fb4c569932d8c25246e0f60584090a162d888e59b6841ee0e38a5
-
SSDEEP
3072:aAWT36du5VmyT4gLHz7iFm6Y+HD6I4Ich4yqiDQkfnoFa4uX2:avr6du5VrTfznLgJiXvTf4aP
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3976 4004 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b1432ef93e6466c27d4ac59028ee254.exe"C:\Users\Admin\AppData\Local\Temp\2b1432ef93e6466c27d4ac59028ee254.exe"1⤵PID:4004
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4004 -s 4202⤵
- Program crash
PID:3976
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4004 -ip 40041⤵PID:4296