Analysis
-
max time kernel
142s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 23:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a0c382464009d3922dff1920bfa0d15.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a0c382464009d3922dff1920bfa0d15.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
4a0c382464009d3922dff1920bfa0d15.exe
-
Size
32KB
-
MD5
4a0c382464009d3922dff1920bfa0d15
-
SHA1
3fcb6e264d2f977dd6d44623a0bd054a46cd7780
-
SHA256
e4e2a43cdd6d904076b7d21a99815b89175baf3aacd62fcb35d8fad6f2369dcd
-
SHA512
e2c4200bec37c416d8662199ae5d466a2a71c623914270d5ca4b1b10b001b4d0725b0c12e3525ea04aecfd80cc9313916ead31d3cd26ede59a7cd7a83c5d376b
-
SSDEEP
768:dKXHFfGej0lAciWlnYPifxADLbSFB5xuXpuR4SpTy4:dK1ue4lAciXQoO35xJeOT5
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 4612 404 WerFault.exe 68 2620 404 WerFault.exe 68
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a0c382464009d3922dff1920bfa0d15.exe"C:\Users\Admin\AppData\Local\Temp\4a0c382464009d3922dff1920bfa0d15.exe"1⤵PID:404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 404 -s 2242⤵
- Program crash
PID:4612
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 404 -s 2642⤵
- Program crash
PID:2620
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 404 -ip 4041⤵PID:2268
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 404 -ip 4041⤵PID:4476