Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
04-01-2024 18:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41a73542f0a1718449809e2d197fb859.exe
Resource
win7-20231129-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
41a73542f0a1718449809e2d197fb859.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
41a73542f0a1718449809e2d197fb859.exe
-
Size
30KB
-
MD5
41a73542f0a1718449809e2d197fb859
-
SHA1
00d92778af19bdb2ae081e1b4353e4448becd682
-
SHA256
56ea545a5a9426b57434d3c2ba69dca3285084862e324114bbe4a43740742cbc
-
SHA512
a8498f20a58d06d57aeee91daf9a99837ffca74a4758f95d766a60fba84ea4ece8ce07ac062c30bad4490225b46f1f30d16ebce6f72d619f67fdf960e8c051a0
-
SSDEEP
384:wScfuMbZZN4DkvF9tvFXGaunydlU7kh8k/h/XyTu1GJiZcPXxv6JkPn:wlWMbZZN4DkHtdGAd+Ih5ham3ZOXxcGn
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3176 976 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\41a73542f0a1718449809e2d197fb859.exe"C:\Users\Admin\AppData\Local\Temp\41a73542f0a1718449809e2d197fb859.exe"1⤵PID:976
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 976 -s 2282⤵
- Program crash
PID:3176
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 976 -ip 9761⤵PID:624