Analysis
-
max time kernel
141s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
04-01-2024 16:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41567e251d863a5a3fc569cde845b33f.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
41567e251d863a5a3fc569cde845b33f.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
41567e251d863a5a3fc569cde845b33f.exe
-
Size
136KB
-
MD5
41567e251d863a5a3fc569cde845b33f
-
SHA1
e41fe83f357a5b20ec885fa2a4d5a80928211185
-
SHA256
e711890b1f0469e37ad4297058be0b105f7f93c09e62b0f59be9c4f15e3d117c
-
SHA512
669c9b4ae552d4eded32f02a18543966a9812464ef0d8e3bdee50aa077fce888e5b2ad0debb451fa6030219ab3dc4faac5819824e856947601071662f25aadba
-
SSDEEP
768:g/dyA3n3h8qnkoaayrE13I2x8REgOt7tV6FgDEJRlhnOycL9VRDiG:kdBKBolY3SgyvhwJBXcL9VJf
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 60 4980 WerFault.exe 54 2936 4980 WerFault.exe 54
Processes
-
C:\Users\Admin\AppData\Local\Temp\41567e251d863a5a3fc569cde845b33f.exe"C:\Users\Admin\AppData\Local\Temp\41567e251d863a5a3fc569cde845b33f.exe"1⤵PID:4980
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 2202⤵
- Program crash
PID:60
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4980 -s 2242⤵
- Program crash
PID:2936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4980 -ip 49801⤵PID:5088
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 464 -p 4980 -ip 49801⤵PID:1044