Analysis
-
max time kernel
148s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04-01-2024 01:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3f859a64f3e4d5360f4bfd62c6422f0d.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
General
-
Target
3f859a64f3e4d5360f4bfd62c6422f0d.exe
-
Size
265KB
-
MD5
3f859a64f3e4d5360f4bfd62c6422f0d
-
SHA1
e7e0155e76be5e37ce4a97a66d7b6a9a74ea2cd8
-
SHA256
4e5c4004aec483d6bd6f9c1d2d3cdeca6b3588e5dc245b2b42b2ff76c5253047
-
SHA512
5e8d69b10ec522b023894bce2fb904b37173ebf6a4dfcb6cc33451917a02291b0bf7adabfa903651e37c865823aa6ce345667889f6edb18023a27851b4d349e7
-
SSDEEP
6144:83rrFSE3+RxrLh1h3AAzFG+UjnoDAJiJ/xS6L:woE3+RxZ1hQA5GPnIAJC/w
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f859a64f3e4d5360f4bfd62c6422f0d.exe"C:\Users\Admin\AppData\Local\Temp\3f859a64f3e4d5360f4bfd62c6422f0d.exe"1⤵PID:3540
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3540 -s 5602⤵
- Program crash
PID:2320
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3540 -ip 35401⤵PID:2268