Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
07/01/2024, 13:13
Static task
static1
Behavioral task
behavioral1
Sample
49140a588b290549fd8d96f59a7d66f3.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
49140a588b290549fd8d96f59a7d66f3.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
49140a588b290549fd8d96f59a7d66f3.exe
-
Size
799KB
-
MD5
49140a588b290549fd8d96f59a7d66f3
-
SHA1
8ea23a3071944e09831687eefdb29d8637f866b4
-
SHA256
0651710a59ca4778c96c57f758b7632066cea0eb87ab461433b40edd2c2fe744
-
SHA512
c2234c84200b29e127348207d5729327ba4b46755f988da84d21f4d763f647c2e717c8c290bb3a9f30e5750219cd22aa5db0037495162e3f5f7837b35bd85c98
-
SSDEEP
12288:KEuG0LV7tukQf4YHJxfOHGpTLfzzzi/XvnGNYJfwT2+pHTEd:KEuNpwkXiJx2HGpjMPic8NTe
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3012 3324 WerFault.exe 22
Processes
-
C:\Users\Admin\AppData\Local\Temp\49140a588b290549fd8d96f59a7d66f3.exe"C:\Users\Admin\AppData\Local\Temp\49140a588b290549fd8d96f59a7d66f3.exe"1⤵PID:3324
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3324 -s 4842⤵
- Program crash
PID:3012
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 3324 -ip 33241⤵PID:744