Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
05/01/2024, 07:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4319665bd12ceacd99f2b81be140673c.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4319665bd12ceacd99f2b81be140673c.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
4319665bd12ceacd99f2b81be140673c.exe
-
Size
25KB
-
MD5
4319665bd12ceacd99f2b81be140673c
-
SHA1
96eb0f23e028e0e27eb8ee82f9e33dd018566ac4
-
SHA256
03f80c23b31f2f073255ec8c628e1e75dddd02fa8c86c9ea1bb709b88ab673fe
-
SHA512
6e2f3d594f8054bbad7f1004af9a87825ef88bbe6388ccb92990d90aa2b24f10560cf98b0a5cad3e0c9140367cd21c97e7e8e54ebd814301c70508139d8f63da
-
SSDEEP
384:5iUvSrd9LLDvO9UVNHeVCHW1gDg16RcgSZKgDv98wHIcv8FnFGvqF8vFFKFj:QPDW98NHqLa+KqvVockFnFGSF8NFKV
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1520 228 WerFault.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\4319665bd12ceacd99f2b81be140673c.exe"C:\Users\Admin\AppData\Local\Temp\4319665bd12ceacd99f2b81be140673c.exe"1⤵PID:228
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 228 -s 2242⤵
- Program crash
PID:1520
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 228 -ip 2281⤵PID:4964