Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
06/01/2024, 15:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
46a0bc120953b1e430c919dc10831ca6.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
46a0bc120953b1e430c919dc10831ca6.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
46a0bc120953b1e430c919dc10831ca6.exe
-
Size
787KB
-
MD5
46a0bc120953b1e430c919dc10831ca6
-
SHA1
268795b472f1d5a524ba7cdac499254645e12e5c
-
SHA256
5b7075dab6a13dab589f1d9fc80efa7c1a3cf6b4793cf8448f55ff70bce7162d
-
SHA512
a1387e41329c2087e5ab610781e9e39676f15756f25238edeed9431d39f956346677a2ae15fe7ef6a6a47004a91fd97f3873c83ab0a57c25cd0c6f8022053a21
-
SSDEEP
24576:rDxK0A5yOSPNxoe45BIbklZXEbiMpFLPLu:r456PEBIQl0DpFri
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 4424 4324 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\46a0bc120953b1e430c919dc10831ca6.exe"C:\Users\Admin\AppData\Local\Temp\46a0bc120953b1e430c919dc10831ca6.exe"1⤵PID:4324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4324 -s 3682⤵
- Program crash
PID:4424
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4324 -ip 43241⤵PID:4272