Analysis
-
max time kernel
142s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
06/01/2024, 04:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45458ac0ec91f87d1e40d3acb07cc8c6.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
45458ac0ec91f87d1e40d3acb07cc8c6.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
45458ac0ec91f87d1e40d3acb07cc8c6.exe
-
Size
197KB
-
MD5
45458ac0ec91f87d1e40d3acb07cc8c6
-
SHA1
c213d5f72a5e0fbf8edea5f14d6b5b708ecc2cd0
-
SHA256
eb11a05c6fbcc952b70fed09cbd261ad621bcb72c7a331443cf78d0f80856766
-
SHA512
a522351cda320c3832a4c5b40bf7233fccdd011aace6259b8d54f35b5fad902f395d71bafd660e011b0c4dc57b9c21bbfd82e699e68b2afc0d34fcab2ca8e9d6
-
SSDEEP
6144:zB2lqmTozJQgPv7x8aTyOwjoJyT1IirEiJWbx:zmUlpTPAgyTLEiJYx
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4432 3576 WerFault.exe 14
Processes
-
C:\Users\Admin\AppData\Local\Temp\45458ac0ec91f87d1e40d3acb07cc8c6.exe"C:\Users\Admin\AppData\Local\Temp\45458ac0ec91f87d1e40d3acb07cc8c6.exe"1⤵PID:3576
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3576 -s 3322⤵
- Program crash
PID:4432
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 3576 -ip 35761⤵PID:1540