Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 08:04
Behavioral task
behavioral1
Sample
4873d81b25afe9cb0692fda94d787d9c.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4873d81b25afe9cb0692fda94d787d9c.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
4873d81b25afe9cb0692fda94d787d9c.exe
-
Size
55KB
-
MD5
4873d81b25afe9cb0692fda94d787d9c
-
SHA1
a24b6d433f2186d92a9080fcd4ce01b5b5d363be
-
SHA256
57db1c93104ccce420eaa836ac4d4aa1ae1853aa08f44454557a05e6da1e6665
-
SHA512
513a70750b76f841304a52b8f50b36868ad9b26030da3d9c0305bc6b843d59c2991be5f399976f926a3751c3e13c5bcdd9e94989dd2df4c9a42791476879d19a
-
SSDEEP
768:Gn7CdB+PhdLF9YVZBeFMFh68zNvr/tE76pIyIiOUs2s+IhKEju9m+xhdeV0:T4PhdLzYVZBt3NvztEGIos2svhK8O5H
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3136 1248 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\4873d81b25afe9cb0692fda94d787d9c.exe"C:\Users\Admin\AppData\Local\Temp\4873d81b25afe9cb0692fda94d787d9c.exe"1⤵PID:1248
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1248 -s 4282⤵
- Program crash
PID:3136
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 1248 -ip 12481⤵PID:2312