Analysis
-
max time kernel
147s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 02:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
44838a69dcab41b58ef35a3060386df0.exe
Resource
win7-20231215-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
44838a69dcab41b58ef35a3060386df0.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
General
-
Target
44838a69dcab41b58ef35a3060386df0.exe
-
Size
36KB
-
MD5
44838a69dcab41b58ef35a3060386df0
-
SHA1
977d8947fa93d778f107819135129c48f00ef216
-
SHA256
41962b362a77da8d852d92fd8137db03467e35b627f42e274031ed4b013e6691
-
SHA512
ff043ce975089c17675ab0507fc737415d3d68917687d030bb374e3761c5b4aa00b67ffdf04cdbf823bb51f96641e1ef4783de457962d504a8c4fe755a64c5ec
-
SSDEEP
768:1mMqYQBLN7a2xrR1K8FnVuyJyB763Tf1jdooLG8KvSjyp:gMqYQBxljKEnmB763D1h/Kqjy
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 216 404 WerFault.exe 15 4680 404 WerFault.exe 15
Processes
-
C:\Users\Admin\AppData\Local\Temp\44838a69dcab41b58ef35a3060386df0.exe"C:\Users\Admin\AppData\Local\Temp\44838a69dcab41b58ef35a3060386df0.exe"1⤵PID:404
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 404 -s 4322⤵
- Program crash
PID:216
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 404 -s 4322⤵
- Program crash
PID:4680
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 404 -ip 4041⤵PID:3028
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 492 -p 404 -ip 4041⤵PID:1716